Used electronics present security concerns

Issue 1 2021 Infrastructure

Business owners could be in for a data protection headache as many used electronics that are returned still hold personal information on them. In many cases, these devices have information such as credit card details, personal passwords and photos.

They need to realise the importance of data security when issuing and decommissioning IT assets. There are major privacy concerns as more used laptops and smartphones are returned to employers with sensitive personal data. Imagine the monumental task of preparing and issuing thousands of new laptops to remote workers that are distributed across the country. This is, in context, far easier than trying to recover the retired equipment securely.

Employers have a legal obligation to clean these devices professionally and ensure that all data is erased from them prior to decommissioning and disposal or redistribution. Sadly, this is not done professionally and new users are inadvertently able to access confidential information of the previous owner.

ITAD (IT asset disposition) firms traditionally provided secure erasure of hard disk drives on site at their customers' locations. This approach offers convenience for the customer as well as maintaining security by only allowing drives to leave the secure facility after they have been sanitised.

With innovative erasure technologies, ITAD service providers can now safely decommission and erase storage media that are physically located anywhere, without staff travel. This approach helps ITADs cost-effectively enhance enterprise data security for their customers.

A use case

If you consider any large organisation, they would deploy a new laptop to their users, which is generally quite a cumbersome project even at the best of times. Now with lockdown, it's become an even bigger challenge, and the technology change is under pressure because of it.

With the increase in remote working, many clients are concerned about getting technology back from the end users. The managed service providers (MSPs) continue deploying new laptops to home workers and there is no way of returning their old equipment. The biggest concern is removing the data on the old equipment.

Xperien has developed a solution to remotely sanitise any IT asset. This means remotely removing the data, which is important to maintain compliance and to ensure that the company's proprietary information is removed completely from those assets.

More importantly, there are minimal or no costs for this service because it is recovered from the residual value of the asset, which we ultimately give back to the organisation. They may still even find that they get a return on investment from the clean asset.

Compliance

This function is governed by legislation including the Protection of Personal Information Act (POPIA) and General Data Protection Regulations (GDPR). One needs to ensure that the data is removed according to the regulations and ITAD providers need to provide evidence that the data has been removed securely.

Xperien provides a certificate of authentication that the data has effectively been removed and that the organisation complied with the respective regulations.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Cyber resilience – protect, defend, recover
Infrastructure
The challenge with AI is that threats are getting harder to detect. As a result, plans in 2024 are not just about detection and prevention, but about recovery.

Read more...
Powering business resilience and field operations
Infrastructure Products & Solutions
[Sponsored] The Anker 757 Portable Power Station emerges as a strategic asset for businesses looking to overcome power instability and the demand for operational efficiency in remote and field-based environments.

Read more...
Top bets for backup and business continuity
Infrastructure
Become your organisation’s data pioneer and spearhead data governance and protection of critical data. Challenge why best practices are not adopted or in place, while highlighting the inherent risks this poses.

Read more...
Next-gen solar-powered switches
Infrastructure
Duxbury Networking has introduced its range of solar unmanaged switches, which are ideal for any environment requiring reliable Power-over-Ethernet (PoE) capabilities, such as IP phones, cameras, and access points.

Read more...
Navigating South Africa's cybersecurity regulations
Sophos Information Security Infrastructure
[Sponsored] Data privacy and compliance are not just buzzwords; they are essential components of a robust cybersecurity strategy that cannot be ignored. Understanding and adhering to local data protection laws and regulations becomes paramount.

Read more...
Creating a cybersecurity strategy in a world where threats never sleep
Information Security Infrastructure
[Sponsored Content] The boom of Internet of Things (IoT) technology and the chaos that surrounded the sudden shift to work-from-home models in 2020 kick-started the age of cybercrime. In that period, incidents rose by 600%, affecting every industry and showing no signs of slowing down.

Read more...
Gallagher Security’s achieves SOC2 Type 2 recertification
Gallagher News & Events Integrated Solutions Infrastructure
Gallagher has achieved System and Organization Controls (SOC2 Type 2) recertification after a fresh audit of the cloud-hosted services of its integrated security solution, Command Centre. The recertification was achieved on 21 December 2023.

Read more...
Cyberattacks the #1 cause of business outages
Editor's Choice Information Security Infrastructure
The latest survey by Veeam Software shows that 92% of organizations will increase their spending on data protection by 2024 to achieve cyber resilience due to continued threats of ransomware and cyberattacks.

Read more...
Nology races to end 2023
Editor's Choice News & Events Infrastructure
Nology ended 2023 with an event highlighting its various products and services to the local market, followed by a few laps around the Kyalami Indoor Karting track.

Read more...
Cybersecurity integrated with data protection
Technews Publishing News & Events Infrastructure
Last year's VeeamOn Tour conference in South Africa was a smaller version of the annual global Veeam conference, aimed at the company's regional partners and customers.

Read more...