An increasing number of sophisticated cyber attacks in the past year has corporations and Internet security experts on high alert. But information security goes beyond phishing schemes, malware or hackers stealing valuable information from the wired world.
Less refined data breaches play out in the work place every day with equally devastating results. Stolen laptops with access to customer information, work orders thrown in the trash, a general confusion over what should be shredded versus recycled and even dumpster diving are some real-life examples of how small businesses become the next national headline. That’s why partnering with a certified destruction vendor can be your organization’s best defense when it comes to information destruction.
So what should you look for when it comes to a shredding company? Consider asking the following six questions before signing, initialing and dating the agreement:
1. Are you certified by a recognized trade association or similar third party? As part of the Federal Trade Commission’s FACT Act which went into effect in 2005, the FTC recommends small businesses work with certified information disposal companies to properly destroy consumer information. The National Information for Destruction (NAID) is one such recognized trade association. NAID sets the standard for how information disposal companies destroy sensitive information. Membership means companies undergo random and regularity scheduled, onsite audits by trained, accredited security professionals, among other requirements. A NAID Membership means a company has merely paid their dues and is able to promote the NAID membership logo on their website.
2. Do you provide both on-site and plant-based shredding? Every business is unique; therefore, no two shredding services will be identical. The bottom line is that you have the option of having sensitive information shredded as you like it: either on-site or plant-based. Companies who elect to have their shredding done on-site are serviced by a mobile shredding truck. It’s important to make sure the truck is properly maintained, secure and equipped with the technology to handle on-site shredding including a video camera and a choice of shredding size options. Plant-based shredding is where the shredding happens at the information destruction vendor’s secure facility. In this way, the containers are switched out.
3. How secure is your shredding process? From start to finish this should be a seamless process where the chain of command is never broken. That means:
- The drivers handling the secure containers undergo background checks and random drug screens and maintain high level of security at all times.
- The information destruction service provider has a written security and operation policies and procedures in place and follows them.
- The mobile trucks and plant-based destruction equipment are in proper working condition.
- Video cameras capture both the plant-based and mobile shredding and the recordings are kept for at least 90-days.
- The trucks themselves are secure and state-of-the-art; offering various shred sizes that can be changed by the drivers with a press of a button.
4. What kind of bins do you provide? There should be a variety of secure consoles and carts that fit in with your existing office décor and look.
5. What other services do you offer? Information security goes beyond just shredding a company’s proprietary or client information. DataShield also offers:
6. What about references? Don’t just take the company’s word about their great information destruction services. Ask their customers too!
If you’re asked the above questions and are satisfied with the answers, then rest assured the company you choose is the right fit. If not, contact us for more information. We’ll be happy to help you out.