Physical Handling

Client drives are placed in a locked box and shipped to a PlanITROI facility for wiping or shredding.

PlanITROI provides clients the following Data Destruction services on and offsite for all types of Media (depot, onsite & mobile):

• Media Destruction to NIST SP 800.88 standards (Degaussing – depot, onsite & mobile)
• Media Destruction to NIST SP 800.88 standards (Shredding – depot, onsite & mobile)
• Media Erasure to NIST SP 800.88 standards (depot, onsite & mobile)
• Lockable Media bins (onsite & mobile)

PlanITROI utilizes a network of pre-approved logistics vendors that specialize in the transportation of IT assets. Additionally PlanITROI utilizes secure packing to secure transport to processing facility. PlanITROI uses seal straps and black wrap to protect clients assets from tampering while they are in transport. Each box is secured by an individual seal strap and then the entire pallet is sealed with a strap before wrapping and transport.

PlanITROI's Secure Logistics and Chain of Custody

PlanITROI provides secure logistics to our clients requirements, including:

• sealed trucks
• GPS tracking of all vehicles
• online tracking of all vehicles
• dual drivers as required
• armored transport as required
• follow-on vehicle to assure shipments travel securely and seals are not tampered with in transit as required by clients

PlanITROI’s ensures the physical integrity of shipments as they flow through PlanITROI facilities by utilizing specialized packaging with box and pallet control by unit serialization. PlanITROI is insured and takes 100% responsibility for any loss or damage. PlanITROI has not been cited for any lost or damaged assets.

PlanITROI’s process is as follows:

1. Client securely transfers media to PlanITROI in a locked bin for destruction (Media can be hard drives, tapes, memory, etc.)
2. PlanITROI then degausses media as it is removed from bin to ensure data has been eradicated using NIST-approved degausser
3. PlanITROI then scans serial numbers and records in PlanITvision for proper chain of custody reporting to client
4. PlanITROI then shreds media to NIST-level shredding

Process can be performed at PlanITROI owned facility, partner facilities, client facilities, or mobile secure trucks with video for proof. PlanITROI provides degaussers and media bins at our clients' locations.

PlanITROI handles all hard drives of assets that will be remarketed by performing data erasure compliant with NIST SP 800.88 standards using the Tabernus erasure tool with reporting. For applicable assets such as PCs and notebooks, PlanITROI then installs a Microsoft Authorized Refurbisher Windows Operating System. This additional data protection preserves the hard drive for reuse and makes the asset marketable.

Any asset that the data cannot be purged or the asset cannot be verified as “Data Safe” (for example, they are bad or non-operable) must be made “Data Safe” by removing the drives containing data so they can be physically destroyed. In the case where the data is not on a removable entity the entire asset must be set aside and physically destroyed (crushed and shredded). PlanITROI provides a certificate of data destruction for every data bearing device.

PlanITROI has a documented process for identifying SSD’s. First, the PlanITROI team is proficient at identifying SSDs:

• All SDDS have: a host interface, NAND (NAND-based flash), and a controller
• Flash memory is organized into pages and blocks
• Flash memory has particular performance properties
• The controller does a lot to present all of this as simple block device
  • Garbage collection
  • Wear Leveling
  • Overprovisioning

Then, PlanITROI follows NIST SP 800-88 guidelines for SSD media sanitization. PlanITROI applies all three purge methods:

• Auto Identify SSD in the process
• Automatically apply a 3 step approach
1. Perform Cryptographic Erase
2. Perform Secure Erase (built in command)
3. Perform Over Write - 3x multiple

• Report Outcome on each step