3_PhysicalHandling

Physical Handling

Flexible. Secure. Timely.

100% Safe Handling Guaranteed

“We chose PlanITROI because they are 100% buttoned up in terms of certifications, professionalism, and service.  In all the years of working with them, we’ve never felt like our data was at risk.  That peace of mind that comes with knowing our data is in safe hands is priceless.”

– PlanITROI Client

PlanITROI’s approach to logistics provides clients complete transparency to the chain of custody from the client’s facility to PlanITROI’s facility. PlanITROI offers any level of secure logistics our clients require.

Our methodology for the protection of client information is sound and based on industry practices. Additionally, PlanITROI can provide tamper-proof boxes and witness destruction for any site, and region per client request.

How would we handle a loose hard drive?

Client drives are placed in a locked box and shipped to a PlanITROI facility for wiping or shredding. PlanITROI provides clients the following Data Destruction services on and offsite for all types of Media (depot, onsite & mobile):
  • Media Destruction to NIST SP 800.88 standards (Degaussing – depot, onsite & mobile)>
  • Media Destruction to NIST SP 800.88 standards (Shredding – depot, onsite & mobile)
  • Media Erasure to NIST SP 800.88 standards (depot, onsite & mobile)
  • Lockable Media bins (onsite & mobile

How would we secure the assets for secure transport to our processing facility?

PlanITROI utilizes a network of pre-approved logistics vendors that specialize in the transportation of IT assets. Additionally, PlanITROI utilizes secure packing to secure transport to a processing facility. PlanITROI uses seal straps and black wraps to protect clients’ assets from tampering while they are in transport. Each box is secured by an individual seal strap and then the entire pallet is sealed with a strap before wrapping and transport.

PlanITROI’s Secure Logistics and Chain of Custody

PlanITROI provides secure logistics to our client’s requirements, including:

  • sealed trucks
  • GPS tracking of all vehicles
  • online tracking of all vehicles
  • dual drivers as required
  • armored transport as required
  • follow-on vehicle to assure shipments travel securely and seals are not tampered with in transit as required by clients

Discuss our capability to ensure the physical integrity of shipments as they flow through our operation, including our process for communicating any loss or damage to the company.

PlanITROI ensures the physical integrity of shipments as they flow through PlanITROI facilities by utilizing specialized packaging with box and pallet control by unit serialization. PlanITROI is insured and takes 100% responsibility for any loss or damage. PlanITROI has not been cited for any lost or damaged assets.

How do we handle the hard drives of assets that will be recycled?

PlanITROI’s process is as follows:
  1. Client securely transfers media to PlanITROI in a locked bin for destruction (Media can be hard drives, tapes, memory, etc.)
  2. PlanITROI then degausses media as it is removed from the bin to ensure data has been eradicated using NIST-approved degausser
  3. PlanITROI then scans serial numbers and records in PlanITvision for proper chain of custody reporting to the client
  4. PlanITROI then shreds media to NIST-level shredding
The process can be performed at PlanITROI-owned facilities, partner facilities, client facilities, or mobile secure trucks with video for proof. PlanITROI provides degaussers and media bins at our clients’ locations.

How do we handle the hard drives of assets that will be remarketed?

PlanITROI handles all hard drives of assets that will be remarketed by performing data erasure compliant with NIST SP 800.88 standards using the Tabernus erasure tool with reporting. For applicable assets such as PCs and notebooks, PlanITROI then installs a Microsoft Authorized Refurbisher Windows Operating System. This additional data protection preserves the hard drive for reuse and makes the asset marketable.

How do we handle hard drives registered as bad or non-operable?

Any asset that the data cannot be purged or the asset cannot be verified as “Data Safe” (for example, they are bad or non-operable) must be made “Data Safe” by removing the drives containing data so they can be physically destroyed. In the case where the data is not on a removable entity, the entire asset must be set aside and physically destroyed (crushed and shredded). PlanITROI provides a certificate of data destruction for every data-bearing device.

How do we identify solid-state hard drives (SSD) and how do we manage data destruction for these devices?

PlanITROI has a documented process for identifying SSDs. First, the PlanITROI team is proficient at identifying SSDs:

  • All SDDS has: a host interface, NAND (NAND-based flash), and a controller
  • Flash memory is organized into pages and blocks
  • Flash memory has particular performance properties
  • The controller does a lot to present all of this as a simple block device
    • Garbage collection
    • Wear Leveling
    • Overprovisioning

Then, PlanITROI follows NIST SP 800-88 guidelines for SSD media sanitization. PlanITROI applies all three purge methods:

  • Auto Identify SSD in the process
  • Automatically apply a 3 step approach
        1. Perform Cryptographic Erase
        2. Perform Secure Erase (built-in command)
        3. Perform Over Write – 3x multiple
  • Report Outcome on each step

 

Our Processes

Sealed truck (this is PlanITROI’s default option)

 

 

 GPS tracking of all vehicles

 

 

Follow-on vehicle to assure shipments travel securely and seals are not tampered with in transit (optional)

 

 

Armored transport (optional)

Case Study

The Beast of Data Security

Ensuring data security at an affordable price