ISO 27001 7.14 Secure Disposal or Re-use of Equipment

Requirement

"Items of equipment containing storage media shall be verified to ensure that any sensitive data and licensed software has been removed or securely overwritten prior to disposal or re-use."[1]

Explanation

To protect the confidentiality of the organization's information all digital media should be sanitized before it is reused within the organization or securely destroyed before disposal. Examples include wiping a computer's hard drive before it is assigned to a new user and shredding hard drives instead simply wiping and throwing them away.

References

  1. ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…