Page 59 - Ipsos
P. 59
Information Classification: Internal Use
Ipsos Book of Policies & Procedures
- Media such as CD’s and DVD’s will be shredded or stored as per sections 7.2 and 7.3
below.
7.1 Degaussing
For those with a degaussing unit, all hard drives and magnetic media such as tapes will be
degaussed before disposal.
7.2 Hard Disk and Media Storage
Functioning or non-function hard disks or electronic media such as tapes awaiting
destruction by means of shredding, degaussing or wiping must be stored in a secured
location with access to the room/safe/filing cabinet only given to those staff who need
access to the media.
A list of who has access to the media will be maintained
A list inventorying all hard disks and electronic media such as tapes will be maintained
and updated as hard disks and electronic media are added and destroyed. The inventory
will list the serial number for hard disk and tape labels/names for tapes. The list will also
list the status and state of the hard disk.
This inventory will be reviewed at least twice a year to check for any lost or stolen hard
disks and electronic media.
7.3 Media Destruction Standards
The vendor must consistently demonstrate that they are in control of our information
Assets (i.e.: hard drive/tapes) up to and including their destruction.
Confirmation of destruction of our media must be given within the next business day of its
disposal.
Hard Drives will be disintegrated to a particle size no greater than ¼ inch or 0.635 cm.
CD’s, DVD’s, Backup tapes, audio cassettes, and video cassettes are shredded to ½ inch
or 1.27 cm.
Paper documents will be shredded or cross cut on site.
7.4 Hard Disk Wipe Standards
All hard disks ready for destruction or disposal must be wiped using the DBAN utility. This
utility is free from download and can be obtained from your local member of the Global
Security team - global_security@ipsos.com. The following settings must be used.
- Wipe Method of US DOD
- 7 passes
- Enable Verification
Page 19 of 22