Disposal of assets

Please note that while ISO 27001 provides a general objective for the disposal of media, it does not provide technical guidance on how to perform media disposal.

To see how a Disposal and Destruction Policy compliant with ISO 27001 looks like, please see this free demo template at this link: https://advisera.com/27001academy/documentation/disposal-and-destruction-policy/

For technical guidance, you should consider these references:

• ISO/IEC 27040 Information technology — Security techniques — Storage security https://www.iso.org/obp/ui/#iso:std:iso-iec:27040:ed-1:v1:en
  -NIST 800-88 - Guidelines for Media Sanitization https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final

These articles can also help:

• Secure equipment and media disposal according to ISO 27001 https://advisera.com/27001academy/blog/2015/12/07/secure-equipmentand-media-disposal-according-to-iso-27001/
• 5 practical tips for media disposal according to ISO 27001 https://advisera.com/27001academy/blog/2018/10/22/5-practical-tips-for-media-disposal-according-to-iso-27001/