Document Name: | I.T. STANDARD DISPOSAL |
Document Version: | V1.0 |
Effectivity Date: | February 15, 2023 |
History of Amendments: | DRAFT |
Prepared by: | Joey Reyno |
Approved by: | Ion Mudreac |
I. OBJECTIVE
To establish standard guidelines on the disposal and destruction of media and assets
II. SCOPE
This policy covers the disposal of I.T. equipment such as laptops, personal computers and other I.T. peripherals and media
III. RASCI MATRIX
R - Responsible (the person/s who must ensure that the task is completed/doer of the task). At least one per task
A - Accountable (the person who is ultimately answerable for the overall activity or task.) There should only be one per task
S - Support (the person/s who can help/facilitate in the execution of the task).
C - Consult or Approver (the person/s that needs feedback and contribute to the activity).
I - Inform (the person/s or groups who must be kept up to date on what is happening in this task).
Combined - single role performing multiple functions.
DISPOSAL OF UNIT | |||
TASK/ACTIVITY | SERVICE TEAM | FINANCE | CTO/Management |
Assess PC/laptop/equipment for disposal | R + A | I |
|
List of Units for Disposal | R + A | I | I |
Removal of Units in Official Inventory system | R + A | I |
|
Removable Media/HDD Removal | R + A | I |
|
HDD Degaussing and Media Wipe/Cleanup | R + A | I |
|
Approval |
|
| R + A |
IV. DISPOSAL
IV.1.1 Service Management Team shall evaluate and assess the equipment for disposal.
The following factors shall determine units that are subject for disposal:
a. Units that are more than five (5) years old
b. Lapsed of the standard 3-years warranty period
c. Unavailable parts for repair
d. Units that are no longer functional and beyond repair
e. Obsolete software that are no longer in used or no longer upgradeable to latest version
IV.1.2 Any equipment with storage media such as servers, pc, laptops, and external drives that contain client’s information and confidential data shall be purged after the five (5) year retention period and subject for approval by the Chief Technology Officer (CTO)/Management.
IV.1.3 Units confirmed for disposal shall be coordinated to Finance for proper documentation of company asset and inventory to update the company books
IV.1.4 Units that undergo disposal shall have certification or attestation that data has been completely purged or destroyed by way of degaussing or similar process of data wiping not less than three (3) pass. I.T. Department may require external degaussing or data cleanup service, if necessary, as part of the disposal process.
V. EXCEPTION HANDLING
I.T. Equipment and peripherals supplied by vendors (i.e., Telco networking equipment and peripherals with configuration data) are not accounted or excluded as part of this policy
V1.0 Disposal Policy
SaFi Bank