Re: HazMat/Disposition

["Mclaughlin, Kevin (mclaugkl)" <mclaugkl () UCMAIL UC EDU>]

Hi:

We work very closely with our Asset Management folks and we have a pretty comprehensive policy that covers equipment 
disposal. To answer your specific questions:
1. Yes we have HazMat requirements and procedures that are followed for some items
2. Yes we have a data classification and Asset Management Policy that covers the disposal requirements
3. We do have an exception rule that requires two internal signatures for some items
4. A lot of our disposal is outsourced and we have multiple signatures, counts, tracking, etc. for a lot of items

Regards,
- Kevin


Kevin L. McLaughlin,  CISM, CISSP, GIAC-GSLC, PMP, ITIL Master Certified
Assistant Vice President, Information Security & Special Projects
University of Cincinnati
513-556-9177

________________________________
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Matthew Gracie 
[graciem () CANISIUS EDU]
Sent: Friday, September 04, 2009 12:59 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] HazMat/Disposition

Plesco, Todd wrote:
> What is everyone doing for disposal of computing/networking/peripherals?
> Do you have HazMat regulatory requirements/procedures?  How about data
> classification - are some devices more sensitive than others which
> require a signature/2nd signature before disposal?
>
> Todd A. Plesco  CISM, CBCP
> Chapman University, Director of Information Security
> One University Drive, Orange, CA 92866
> Phone: (714) 744-7979/Fax: (714) 744-7041

We send all of our electronic disposal stuff to local recycler. Every
machine, no matter what sort of data it held, either has the drive
removed and destroyed or has it secure wiped with DBAN.

--
Matt Gracie                         (716) 888-8378
Information Security Administrator  graciem () canisius edu
Canisius College ITS                Buffalo, NY
http://www2.canisius.edu/~graciem/graciem_public_key.gpg