1. Equipment Surplus & Secure Media Destruction Michael Thorn, Data Security Specialist

2.  May 2009, Pfizer – employee inadvertently tossed out “home use” hard drive in the trash  June 2009, DOD vendor – military contractor disposes of hard drive in foreign country  October 2009, US Veterans Affairs – vendor transferred failed hard drive to recycler Recent Headlines

3.  Choose the “keep your hard drive” option on new purchases  To be or not to be…Green  Extend awareness to include home users and alternate work locations What Can UAB Do?

4. October 2008 – Data Destruction Day Hard drive CD/ DVD 3.5 FloppyTape-diskReel tape Device Count Totals190354754030 Storage in Gigabytes Totals3,800.0 24.5 0.7 450.0 3.4 Fun Stat Total Terabytes of Storage Media Destroyed 4.275 69,600 Total Reel tape length(ft) 13.18 Total Reel tape length(miles)

5. Data ClassificationMedia Count HIPAA707 Proprietary45 FERPA18 Compliance Picture

6. Best Practice: Storage Media Disposition

7. Secure Media Destruction Form Found at: main.uab.edu/Sites/it/faqs/57722/

8.  Hazardous Waste Holding Facility: Freddie Crews  Phone: 934-0015  Address: 400 3rd Ave S Birmingham, AL 35233  Schedule a destruction time Direct Contact for Secure Media Destruction

9.  Surplus Warehouse wants them Obsolete/Old/Unused Computers, Copiers and Printers

10. Transferring Equipment to Surplus

11. Storage Media Identification Process Obsolete or Broken Electronic Equipment – Laptop and desktop computers generally contain mass storage media. However, printers, copiers and fax machines may contain hard drives as well. Does the equipment contain an HD? – Some multipurpose office machines have computer hard drives designed into the devices architecture. Remove Hard Drive – Depending on the device, a hard drive may be easily accessible via a convenient service panel on the equipment, or located obscurely internal to the outer frame of the equipment. Destroy – Hard drive media should be destroyed using the industrial shredder located on campus. Validate – Assure qualified personnel have followed the correct procedures for media sanitation. Document – Maintain chain-of-custody documentation to verify the disposition of hard drives has been attained and for future auditing purposes.

12. Business Class Copiers, Scanners and Printers