Disposing of IT assets the right way

Old computers can still pose a security risk even from the garbage heap. Here are some tips on how to keep your data safe.

Business analyst Edward Broderick encourages companies to treat their old computers like used cars -- trade them...

in when purchasing a new model.

Broderick, a principal business analyst with the Robert Frances Group, an IT executive advisory group, discussed the proper disposal of obsolete IT assets at "Reducing Risk, Restoring Trust: A Leadership Role for IT" conference held last week in New York City.

Disposing of old computer equipment is far more complicated than leaving it on the curb and waiting for the garbage truck to come by. It's never been easy because of environmental concerns. It's become even trickier nowadays, with malicious crackers able to suck customer information and corporate secrets off old hard drives -- even those that have been erased and reformatted several times, Broderick said. According to some computer experts, the only way to truly erase a hard drive is to grind it up into tiny pieces or riddle it with bullets, he said.

For CIOs reluctant to haul their old hard drives down to the firing range, following a few simple guidelines can prevent sensitive information from falling into the wrong hands. Here's Broderick's advice for companies looking to offload old computer equipment:

Trade in the old when you buy new. Make the acceptance and proper disposal of old computers a condition of contracts for new computer purchases.

Don't cheap out. There's probably only a small monetary difference between the best and worst offers you'll receive from companies offering to dispose of old computer equipment. But the amount you might pay in a lawsuit if customer information is compromised or lose in business if corporate secrets leak out could be enormous.

Remember other savings. Cutting out warehousing and other storage costs for the old equipment will bring in future savings.

Indemnify with insurance or transfer of liability. If you contract with a company to dispose of your old computers and personal information about your customers gets pulled, you don't want to be on the hook. Include indemnification and liability transfer as part of any contract to dispose of your contract. Consider insurance.

Consider reputation. To keep from being burned, choose reputable companies like IBM or technology service firm QSGI, which had staff members present at the conference.

Broderick also stressed that the disposal of obsolete computer equipment is becoming a big business, so companies should not feel like they have to take the first offer they receive.

IBM has a program that recycles every possible computer part -- from fans to power sources and even the wiring, Broderick said, and disposes of hard drives properly. And if there are no worthwhile components, IBM will strip out and sell the base elements, like copper and nickel.

"Recycling is profitable," Broderick said. "Low prices generally result in low security."

This article originally appeared on SearchCIO.com.

Dig Deeper on Data center design and facilities

PRO+

Content

Find more PRO+ content and other member only offers, here.

Join the conversation

2 comments

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

Interesting article, and I think it provides some good, sensible things to do to help protect data. One thing I would be curious to see would be how many companies take these same precautions with their data that they store in the cloud. I don’t think it’s something that people I work with have really thought about, and I suspect that an alarming number or other companies don’t consider the issue with respect to their cloud presence either.
Cancel
Being an IT person for over 3 decades, I'm well aware of the issues with old equipment. I see a lot of these pop-up recycling place at a local church or parking lot. Some charge a small fee and other have been free. I'd be very leery turning over a computer to someone I did not know, especially if the hard drive was in it. A lot of people probably forget to wipe them or remove them.

Cancel

-ADS BY GOOGLE

SearchWindowsServer

SearchEnterpriseLinux

SearchServerVirtualization

SearchCloudComputing

Close