Shredding CDs and USB memory sticks
Assign topic to the user
Answer: If I understood your question well, you're asking about the documentation you should use for the process of shredding the media. From our ISO 27001 Documentation Toolkit you can use the Disposal and Destruction Policy https://advisera.com/27001academy/documentation/disposal-and-destruction-policy/ through which you can define some basic rules on how this process is handled.
You should also keep records of destruction of these media, however there is no need for some special form - in such records you need to specify what media was destroyed, method of destruction, when was this done, and by whom.
This article will also help you: Secure equipment and media disposal according to ISO 27001 https://advisera.com/27001academy/blog/2015/12/07/secure-equipment-and-media-disposal-according-to-iso-27001/
Comment as guest or Sign in
Apr 20, 2016