- Environmental compliance
- Data security
- Reliability and logistics
- Auditing and reporting
- Compliance with internal policies
Think through the ramifications for your corporate strategy beyond the immediate project needs. The vendors that you consider should carefully assess your needs in order to co-develop strategies
Enterprises can no longer count on selling off their used assets at a profit because most technology rapidly decreases in value. Be aware that reselling is not a simple process. If you do decide to resell,
you’ll need to be able to track the equipment and obtain proof that hard drives have been completely erased. The cost of logistics may also outweigh a meaningful investment recovery. Recycling may
Other factors to consider in assessing potential vendors include:
- De-manufacturing process and capabilities
- Environmental compliance record
- Data security safeguards
- Operational processes — are they well documented?
- Is there a robust audit trail?
- Shipping capabilities and processing locations—can they accommodate the location(s) of your equipment?
- Insurance coverage—do they maintain Pollution Liability insurance?
and Accurate Credits Transactions Act) and other laws. All asset retirement vendors should possess a baseline capability of data destruction that meets Department of Defense 5220-M standards. In addition, health care and financial services enterprises must comply with various federal laws that impose significant additional data security safeguards. These regulations include HIPAA (the “Health
Questions to consider:
- What is the vendor’s data destruction process?
- What are the various options available (e.g. software vs. physical destruction)?
- What kind of quality control mechanisms does the vendor maintain in order to ensure that the data is actually destroyed? Do they undertake a sampling process and/or disk inspections via computer forensics?
- What kind of on-site security systems are in place at their facilities in order to ensure protection of your equipment?
- Does the vendor maintain an errors and omissions insurance policy in the event that some of your data is accidentally disclosed?
4) Evaluate Environmental Stewardship and OSHA Compliance
Is the vendor committed to complying with your company’s environmental policies as well as industry, state and local regulations? Environmental regulations vary widely from state to state. Does the
Lastly, confirm that the vendor has the appropriate facility permits such as storm, water and air quality approvals. Also, find out what testing they perform on their employees for exposure to lead and other
5) Assess Reporting and Tracking Capabilities
There is more to reporting and tracking than issuing certificates of destruction. Anyone with a laser print can create a “recycling certificate.” Certificates provide no protection if the vendor is disposing
The Comprehensive Environmental Response, Compensation, and Liability Act (“CERCLA” – commonly known as the “Superfund law”) gives the EPA the power to impose fines and to hold your organization responsible for remediation costs – regardless of whether title to the assets in question was transferred to a third party. Make sure that you thoroughly investigate a potential asset retirement vendor’s compliance with all federal, state, and local environmental laws in order to minimize potential liability.
What kind of documentation does the vendor maintain concerning its internal Environmental Management Program or “EMP”? Does the vendor have a well-documented operational process and
In the final analysis, you need to select an asset retirement partner that you can trust to manage the full range of “end of life” issues. The right resource can provide you with peace of mind in terms