Is Your Information Destruction Process Watertight?
Everyone knows that ‘information is power’... but confidential information is also a huge security risk if it gets into the wrong hands.
To keep the workplace secure, experts recommend outsourcing paper shredding services and other information destruction.
While statistics show that office workers still use over 10,000 sheets of paper every year, that doesn't even account for the thousands of digitised documents on their computer hard drives. It’s critical that companies secure confidential information in both forms - and from creation to destruction.
While in-house shredding is an option, companies in an earlier Ponemon study claim it’s more efficient to hire an outside company to conduct the destruction process. Office shredders are typically strip shredders, and strips can be reassembled. The shredding task itself is time-consuming – staples and clips must be removed before paper is fed into the machine by hand. In-house document shredding cost must also include the potential increase in internal fraud risk. According to a 2015 study from Intel Security, employees accounted for 43% of data loss, half of which was accidental.
Here’s how to assess whether a commercial shredding services company is trustworthy and reliable:
- Experience: The company has a long track record in local and secure data destruction solutions.
- Equipment: Industrial-grade cross-cut shredding technology turns paper into confetti-like pieces, and can accommodate specialised shred size requirements.
- Chain of custody: There is a clear chain of custody. Locked consoles in a variety of styles and sizes are provided for the collection and protection of documents that need to be destroyed. Security-trained professionals remove documents for secure shredding.
- Tailored service: Services are geared to every organisation’s unique needs and complexities. Options include on- or off-site shredding, and flexible scheduling for convenience and practicality.
- Compliance: The company stays up-to-date with privacy laws and regulation changes in industry sectors. It also assists with compliance requirements. Almost half of the respondents in the Ponemon study outsourced document destruction because it offered peace of mind that they were in compliance with privacy regulations.
- Digital destruction: There are hard drive and e-media destruction service options. "Destroying digital information is just as important as paper documents,” said Information Security Forum (ISF) managing director Steve Durbin in a recent CIO.com article. Anything that contains data – electronic media, obsolete hard drives, mobile equipment – must be protected.
- Support services: Secure information handling is a priority, and complements a comprehensive information management strategy. This includes a Shred-it all Policy so that all documents are securely destroyed when no longer needed. Rather than just making people aware of their information security responsibilities and how they should respond, said Durbin, the answer is to embed positive information security behaviours that will cause employees to develop ‘stop and think’ behaviour and habits.
- High industry standards: The organisation commits to the highest standards in the industry such as ISO 9001, ISO 14001 and EN 15713.
- Green practices: After materials are shredded, the shredded paper is 100% recycled.
- Proof of destruction: The document destruction service provider issues a Certificate of Destruction after every shred. This is a permanent record for official requirements. There is no official record with an in-house shredder.
To better protect your organisation, implement a secure document management policy with this free guide.