Laserfiche WebLink
Security Policies and Procedures <br />F. Sanitization of Media <br />When media (hard copy and electronic) becomes obsolete, is no longer required or no <br />longer usable, it is critical that proper sanitization is accomplished. <br />Sanitization Types <br />Disposal: the act of discarding media. This is often done via recycling paper containing <br />"non -confidential" material. <br />Reinitializing: Re -formatting drives so information cannot be retrieved by recovery <br />utilities or any other forms including keystroke recovery attempts. This is achieved by <br />overwriting the disk with zeros for no less than one (1) time. <br />Purging: exposing the magnetic media to a strong magnetic field in order to disrupt the <br />recorded magnetic domains, this is also known as degaussing. <br />Destroying: destruction of media so it cannot be reused as its original purpose. <br />Virtru's electronic disposal policy is as follows: <br />1. Hard -drives are purged, reinitialize or destroyed <br />2. CD or DVD disks are destroyed <br />3. Flash drives are re -initialized or destroyed <br />4. Backup tapes are purged, reinitialized or destroyed <br />Any systems that are leased must be securely sanitized of all Company data prior to <br />being returned to the leasing company. Any additional media (e.g. hard drives, USB <br />drives etc.) will be reformatted then written with zeros for no less than one (1) time to <br />ensure that the data contained on the media has been destroyed. <br />Virtru shall maintain appropriate records of sanitization. This entails validating how, <br />where and when media is sanitized. See Media Sanitization. <br />G. Information sharing and privacy <br />In most cases the sharing and reuse of Personally Identifiable Information is governed <br />by law, regulation and customer expectation. To ensure Virtru meets those <br />requirements, no Personally Identifiable Information will be shared with outside <br />companies, vendors or personnel without written approval from the ISO. <br />Personally Identifiable Information includes: <br />1. Names <br />2. Addresses <br />24 <br />Rev.2015.8.6 <br />