SR-12 Component Disposal
Statement
Data, documentation, tools, or system components can be disposed of at any time during the system development life cycle. Opportunities for compromise during disposal affect physical and logical data, including system documentation in paper based or digital files; shipping and delivery documentation; memory sticks with software code; or complete routers or servers that include permanent media, which contain sensitive or proprietary information.
Applicability
This Control applies to all West Texas A&M network information resources. The intended audience for this Control includes all information resource owners, or designee responsible for implementation.
Implementation
WTAMU shall based on risk decisions dispose of data, documentation, tools, and system components using the following techniques and methods:
- Data sanitization
- Shredding
- Secure third party services