Protect the Data. Record the Treatment.
- Identify data-bearing equipment and agree the appropriate treatment for each media type.
- Confirm how damaged media, unsuccessful sanitisation and other exceptions will be handled.
- Record the applicable processing activity and retain the agreed sanitisation or destruction evidence.
Know what happened. Know which asset it happened to. Keep the evidence.
Define the Security Requirements
Tell us which devices and media are in scope and the security requirements your organisation needs to meet. The processing method, handling arrangements and evidence are agreed before handover.
An Asset-Level Record
Connect the device or media identifier, the agreed treatment, the recorded processing activity and the resulting documentation. The records support your own supplier review and audit requirements.
Agree the Evidence Before Handover
Ask us about the method suitable for your media, the handling of exceptions and the asset identifiers recorded on the relevant certificate. Required supplier credentials and service arrangements should be confirmed before collection.
Questions to Ask