Columbia Campus IT SecurityUMKC IT SecurityRolla Campus IT SecuritySt. Louis Campus IT Security

Asset Management

Reuse, Transfer or Resale of Electronic Storage Devices

Purpose

In order to ensure the confidentiality of University data and to comply with software licensing contracts all electronic storage devices must be properly cleaned prior to reuse, transfer or resale.

Definitions

Cleaned: Completely erasing/cleaning a device in accordance with the UM Information Security Program Data Classification System or in some manner that ensures that the data is not retrievable.

Destroyed: Complete destruction of hard drives and other storage media/devices in an approved manner.

Electronic data: Any form of information stored on electronic storage devices.

Electronic storage device: Any device used to store electronic/digital data or information. This includes but is not limited to desktop/laptop computers, servers, network devices, magnetic tape, cell phones, SmartPhones, PDAs, portable storage drives, flash drives, fax machines, copiers and digital cameras.

Information Security Officer (ISO): The designated Information Security Officer at each business unit responsible for operational information security activities.

Re-image: Installing a system baseline, typically on computers, that provides a base level of operating system and software so that the device is ready for reuse.

Re-sale: Offering excess equipment for sale to the general public through processes established by Surplus Property.

Reuse: Redeployment of an electronic storage device from one University user to another.

Transfer: Making excess equipment available to other departments or campuses through processes established by Surplus Property. Transfer could also include the process of sending hard drives or whole systems to vendors for repair or maintenance activities.

Requirements

University Departments

IT Staff

Surplus Property

Information Security Officers

University Employees

Electronic Storage Device Quick Reference Guide

Disposition Method Disposal Standard
Transfer for reuse Completely cleaned and reimaged if appropriate
Transfer to Surplus Property Completely cleaned or mark for destruction
Personally owned devices Ensure University owned data is wiped from the device upon leaving the University
Magnetic tape and other non-reusable media Destroy or transfer to Surplus Property for destruction

Approved March 24, 2010