Secure Media Disposal
Storing of any old records or insecurely disposing of confidential waste could compromise both CMCS and our clients. Therefore, any item received or produced with an element of customer data included is deemed as secure waste by CMCS and is subject to best practice handling and destruction requirements based around cheque data and card holder data regulations.
Any physical item identified as waste (i.e. not despatched as final product or supplied to Customer as sample) will be placed in one of the padlocked security bins that are kept in the CMCS secure process area. These bins are constantly monitored by the internal CCTV cameras when in use and when full.
When volume dictates the bins are emptied, and CMCS has an agreement with a recognised 3rd party security shredding company that will attend site. A lorry containing the shredding machine (which shreds to trade standards 10mm by 10mm serrated sections) reverses into the CMCS secure facility at which time the bins are taken from the secure process area one at a time and unlocked under the supervision of a CMCS supervisor. The process is carried out under direct coverage by CCTV cameras.
The bin is then lifted onto the shredding machine with the CMCS supervisor in constant attendance monitoring the process and the 3rd party employee carrying out the task. Each bin is checked to be completely empty, then returned to the secure process area. This process is repeated until all bins have been emptied. The appointment is certified by the provider by unique reference number, time, date and weight. All shredded matter which leaves CMCS will later be recycled as per the 3rd party provider’s policy.
If a Customer requests segregation, this can be arranged by identifying bespoke bins for use during completion of the process, and a bespoke shredding can be arranged which will have a dedicated certificate.
Hardware Disposal – The item is first assessed based upon its value to the business (be that functional or financial), and then whether it meets the criteria for WEEE disposal. Upon confirmation that the item meets the criteria, the item is further assessed for sensitive data security purposes.
In the event that the item is capable of non-volatile storage, the memory device is removed and destroyed immediately. This prevents the item from being re-used in the event of recycling and ensures that any sensitive data has been removed. A drill is used where possible to permanently destroy the storage capability of the device, otherwise the device is crushed. The level of damage to the device is decided on an item per item basis.
The machine itself will be disposed of via WEEE regulated process, and the WEEE process itself has a secondary check to ensure that all memory capability has been removed and destroyed.