My personal recommendation, cite the regulation, write it into the Contract, and make sure the HD is destroyed properly, either that or don't do business with the vendor. Pretty cut and dry. You really don't want to have to go through breach notification.
Z Edward Ziots CISSP,MCSA,MCP+I,Security +,Network +,CCA Network Engineer Lifespan Organization 401-639-3505 [email protected] -----Original Message----- From: David W. McSpadden [mailto:[email protected]] Sent: Monday, April 26, 2010 7:39 AM To: NT System Admin Issues Subject: RE: Copier Hard Drives and sensitive data? If you trash the hard drive will it still function? If it is leased will that null the agreement and cost you in the end? -----Original Message----- From: Kurt Buff [mailto:[email protected]] Sent: Sunday, April 25, 2010 11:00 PM To: NT System Admin Issues Subject: Re: Copier Hard Drives and sensitive data? It's not FUD. Copiers have hard drives, which often store things that users copy, or use as document templates. Trashing the hard drive before disposing of them is good practice, especially if they're leased. Kurt On Fri, Apr 23, 2010 at 07:49, David Mazzaccaro <[email protected]> wrote: > This article is full of FUD. Read the comments... > Here's the link.. it was CBS... > http://www.cbsnews.com/stories/2010/04/19/eveningnews/main6412439.shtml > > ________________________________ > From: David McSpadden [mailto:[email protected]] > Sent: Friday, April 23, 2010 10:47 AM > To: NT System Admin Issues > Subject: Copier Hard Drives and sensitive data? > > Operations Officer comes to me this morning and asks if we wipe our copiers > clean before we give them away or throw them away. > > I say we clean everything before we ever let it go out of our department but > why are you asking about copiers. He proceeds to tell me about a 20/20 or > 60 minutes spot where some person but 5 copiers and got all kinds of > personal info from police departments and what not's because copiers have > hard drives in them and they retain everything that is copied to them over > time. > > > > So, is this true? > > > > If so is there a way to 'clean' them before reselling them or trashing them > and still keeping them functional? > > > > > > > > > > . > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
