Docy Child

IT-16 – Asset Disposal

Estimated reading: 2 minutes 228 views

What is this control really about?

This control is about implementing a formal process to dispose of a company’s equipment at the end of their useful life. This includes anything from an old laptop to electronic data.

Available tools in the marketplace

The following listing is “crowdsourced” from our customer base or from external research. TrustCloud does not personally recommend any of the tools below, because we haven’t personally used them. 

Tools
SIMS LIFECYCLE
Fresh service

Available templates

TrustCloud has a curated list of templates internally or externally sourced to help you get started. Click on the link for a downloadable version:

What is required to implement this control?

You would need to document the process of disposing of an equipment. This document at a minimum should included:

  • The type of equipment in your organization to dispose of
  • The time when an equipment would need to be disposed of  (i.e when its no longer needed, when it reached end of life, unused, etc..)
  • How the data on the equipment should be deleted (i.e. overwritten;  electronic recyclers; hard drive shredding)
  • The method used to disposed of an equipment  (degaussing; recycling)
  • The parties responsible for implementing and overseeing the process

Secondly, you would need to implement a way to track any equipment tagged for deletion. This can be tracked in a ticketing system.

What evidence is the auditor looking for?

  • Asset disposal procedure
  • Project Management tool used to track of asset disposed and recent example of one recently disposed asset

An example of what an artifact can look like

  1. Asset disposal procedure

Example from an externally sourced IT asset disposal policy from Iron Mountain

IT 16 1

  1. Project Management tool used to track of asset disposed and recent example of one recently disposed asset

Example 1 – note that this ticket is not displaying the details under the disposal. This is what the auditor is interested

IT 16 2

IT 16 3

Join the conversation

ON THIS PAGE
SUBSCRIBE
FlightSchool
SHARE THIS ARTICLE
Twitter Facebook LinkedIn

❤️  Joyfully crafted by a 100% distributed team.