Media Destruction

PlanITROI has stringent security measures in place to ensure the safety of client assets and the information stored on your hard drives, tape media, etc. The entire process is contained within the client facility and under complete surveillance physically with each step in the process tracked and recorded within PlanITROI’s PlanITvision system.

Since 2001, PlanITROI has processed over 60 million media devices (HDD, Tape, SSD, Flash, etc.) and destroying massive amounts of data stored on them, we have never had an incident of client’s confidential information being exposed. Our methodology for the protection of client information is sound and based on industry practices. Additionally, PlanITROI can provide tamper-proof boxes and witnessed destruction for any site, and region per client request.

PlanITROI follows all NIST and Department of Defense (DOD) guidelines for executing all PlanITROI ISO procedures as illustrated below.

• Data Destruction - Secure Steps
• Data Erasure
• Erasure System Forces Operator to... Erase, Record & Report Results
• Erasure System provides shop floor control over erasure operator forcing the adherence to Client's SLA's for data eradication. In addition, System provides test results and automatic next steps to the operator while recording every step in the process and reporting to the Client by Serial Number on Drive and tracing it back to the SN on Unit
• Data Eradication: Quality Control
• Within the System, there are unlimited QC checks that can be setup based on client and type of product. If there are issues, we will not allow it to move to finished goods.

Since 2001, PlanITROI has processed over 60 million media devices (HDD, Tape, SSD, Flash, etc.) and destroying massive amounts of data stored on them, we have never had an incident of client’s confidential information being exposed. PlanITROI has never been reprimanded for improper use of confidential information as an onsite and offsite partner. Our methodology for the protection of client information is sound and based on industry practices -- PlanITROI has demonstrated this with all its clients.

PlanITROI follows all NIST and Department of Defense (DOD) guidelines for executing all PlanITROI ISO procedures.

PlanITROI Data Security Policy (depot, onsite, & mobile):

• Certified ISO 27001 media sanitation process standards to ensure 100% data safe outcomes, with redundancy and quality checks.
• All media is erased utilizing certified drive erasure programs that are compliant with NIST SP 800.88 or DOD 5220.22-M standards depending on our client's requirements
• PlanITROI's data overwrite process is audited monthly to ensure compliance with the most up to date erasure standard, in accordance with National Institute of Standards and Technology guidelines for Media Sanitation. For more information: http://csrc.nist.gov/publications/drafts/800-88-rev1/sp800_88_r1_draft.pdf)
• PlanITROI's Data Destruction and Erasure Standards shall at all times be compliant with NIST SP 800.88 standards, Office of Emergency Management (OEM), as well as compliant with the Sarbanes-Oxley Act, the Gramm-Leach-Bliley Act (GLBA), and the Health Insurance Portability and Accountability Act (HIPAA)
• Certificates of Data Destruction and Recycling are standard
• All devices that have memory and sdata storage features, including flash drives, removable media, mobile phones, printing devices, PCs, tablets, etc. and any other media that store data are addressed.

Yes. PlanITROI currently has a technician onsite who protects hard drives removed from PCs for physical destruction by keeping them in a locked bin until they are ready to be degaussed.

Note: PlanITROI’s onsite technician has received hard drive assemblies that are too big to fit into the degausser. Our technician, who goes to great lengths to abide by PlanITROI’s strict client data protection guidelines, dismantles the hard disk boxes so that they can fit into the degausser.

Erasure System Forces Operator to... Erase, Record & Report Results

Erasure System provides shop floor control over erasure operator forcing the adherence to Client's SLA's for data eradication. In addition, System provides test results and automatic next steps to the operator while recording every step in the process and reporting to the client by serial number (SN) on Drive and tracing it back to the SN on Unit.

Data Eradication: Quality Control

Within the System, there are unlimited QC checks that can be setup based on client and type of product. If there are issues, we will not allow it to move to finished goods.

Below is PlanITROI’s process to data erasure and auditing.

PlanITROI’s industry standards for data destruction follow NIST SP 800-88 processes. These include media erasure methods utilizing media wiping of 1x pass minimum, degaussing and shredding. Cryptographic erasure and data erasure methods are utilized on solid state hard drives. Auditing is performed multiple times, first during the Tabernus wipe, then during internal and random checks, and once again at PlanITROI’s Denville, NJ facility.

PlanITROI offers the following data destruction solutions onsite: data wiping, shredding, degaussing.

PlanITROI offers both mobile on-site as well as off-site high-volume hard drive shredding services.

A. Mobile on-site is done within a PlanITROI secure truck

B. Off-site is done within a PlanITROI secure facility

Both have the capabilities of video recording if needed for visual verification. Disposing of the destroyed hard drives consists of placing the remnants of the destroyed hard drives in a locked sealed bin. The locked bin is wrapped in black plastic and sent back to PlanITROI’s Denville, NJ facility via FedEx Secure freight.