This document provides recommendations and requirements for the procedures, processes and performance monitoring to be implemented for the management and control of the physical destruction of confidential and sensitive material to ensure that such material is disposed of securely and safely. This document can be referenced by anyone who processes such material on behalf of others and covers the following scenarios: – on site – using mobile equipment at the location of use (destruction equipment is brought to the confidential or sensitive material); – off site – transport followed by destruction using equipment at a destruction facility (the confidential or sensitive material is brought to the destruction equipment, such as used at a dedicated external facility operated by a service provider); – use of equipment at the Data Controller\u2019s location (confidential or sensitive material and destruction equipment co-located, such as a shredder in a building occupied by a client or clients). Destruction by erasure (e.g. crypto erasure, data overwriting, degaussing or other forms of magnetic\/electronic erasure) is not covered in this document.<\/p>\n
| PDF Pages<\/th>\n | PDF Title<\/th>\n<\/tr>\n | ||||||
|---|---|---|---|---|---|---|---|
| 1<\/td>\n | compares BS EN 15713:2023 <\/td>\n<\/tr>\n | ||||||
| 2<\/td>\n | TRACKED CHANGES Text example 1 \u2014 indicates added text (in green) <\/td>\n<\/tr>\n | ||||||
| 64<\/td>\n | undefined <\/td>\n<\/tr>\n | ||||||
| 71<\/td>\n | 1 Scope 2 Normative references <\/td>\n<\/tr>\n | ||||||
| 72<\/td>\n | 3 Terms, definitions and abbreviations 3.1 Terms and definitions <\/td>\n<\/tr>\n | ||||||
| 75<\/td>\n | 3.2 Abbreviations <\/td>\n<\/tr>\n | ||||||
| 76<\/td>\n | 4 Protection class 4.1 General 4.2 Determination of the protection class <\/td>\n<\/tr>\n | ||||||
| 77<\/td>\n | 5 Determination of security level 6 Increasing the security level <\/td>\n<\/tr>\n | ||||||
| 78<\/td>\n | 7 Destruction equipment 7.1 General 7.2 Use of destruction equipment 7.3 Operating instructions <\/td>\n<\/tr>\n | ||||||
| 79<\/td>\n | 7.4 Destruction outcome 7.5 Confirmation of destruction process and its completion 7.6 Maintenance and performance monitoring <\/td>\n<\/tr>\n | ||||||
| 80<\/td>\n | 7.7 Frequency of destruction equipment assessment 7.8 Redundancy of destruction equipment <\/td>\n<\/tr>\n | ||||||
| 81<\/td>\n | 8 Company destruction premises and service provider holding sites 8.1 General 8.2 Destruction premises and service provider holding site secure areas 8.3 Security <\/td>\n<\/tr>\n | ||||||
| 82<\/td>\n | 9 Controlled access to secure areas 9.1 General <\/td>\n<\/tr>\n | ||||||
| 83<\/td>\n | 9.2 Authorization for access to a secure area for company personnel 9.3 Accompanied access to a secure area for company personnel without appropriate training 9.4 Visitors and contractors (non-company personnel) access to secure area <\/td>\n<\/tr>\n | ||||||
| 84<\/td>\n | 9.5 Controlled access to secure area procedure for visitors and contractors (non- company personnel) 9.6 Secure area access level requirements for visitors and contractors (non-company personnel) <\/td>\n<\/tr>\n | ||||||
| 85<\/td>\n | 10 Contract 11 Record of process of collection through to destruction 11.1 General 11.2 Confidential and sensitive material transfer record <\/td>\n<\/tr>\n | ||||||
| 86<\/td>\n | 11.3 Certificate of destruction <\/td>\n<\/tr>\n | ||||||
| 87<\/td>\n | 12 Subcontracting 13 Company personnel 13.1 Non-disclosure agreement 13.2 Security clearance of personnel <\/td>\n<\/tr>\n | ||||||
| 88<\/td>\n | 13.3 Training of personnel <\/td>\n<\/tr>\n | ||||||
| 89<\/td>\n | 13.4 Control of company drivers 14 Collection and transport of confidential and sensitive material 14.1 General 14.2 Mobile shredding and collection vehicles <\/td>\n<\/tr>\n | ||||||
| 90<\/td>\n | 14.3 On site service \u2013 additional measures 14.4 Security containers <\/td>\n<\/tr>\n | ||||||
| 91<\/td>\n | 14.5 Security bags 15 Storage and retention of confidential and sensitive material at destruction facility 16 Business continuity planning and responding to security incidents 17 Retention of records <\/td>\n<\/tr>\n | ||||||
| 92<\/td>\n | 18 Categories of confidential and sensitive material <\/td>\n<\/tr>\n | ||||||
| 93<\/td>\n | 19 End product waste disposal 20 Supply chain 21 Information security <\/td>\n<\/tr>\n | ||||||
| 94<\/td>\n | Annex A (normative)Destruction outcomes tables <\/td>\n<\/tr>\n | ||||||
| 101<\/td>\n | Annex B (normative)Secure destruction process <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":" Tracked Changes. Secure destruction of confidential and sensitive material. Code of practice<\/b><\/p>\n |