Healthcare organizations invest heavily in protecting data while technology is in use, but significant risk can remain after laptops, desktops, servers, storage devices, mobile devices, and other hardware are retired.
This session examines the often-overlooked final stage of the IT asset lifecycle and provides healthcare IT leaders with a practical framework for managing data security, media sanitization, chain of custody, documentation, and asset disposition.
The session will also explore how security and financial stewardship can complement one another. Attendees will learn how thoughtful asset retirement strategies, certified data sanitization, and appropriate reuse of eligible equipment can preserve residual asset value and help offset future technology investments without compromising data security.
What the session covers
- Where data exposure remains after hardware is retired — and which devices are most often missed.
- A practical framework for data security, media sanitization, chain of custody, documentation, and disposition.
- Modernizing ITAD programs and sanitization practices for today’s media (including flash and self-encrypting drives).
- How certified sanitization and appropriate reuse of eligible equipment preserve residual value and help fund future IT investments.
Read ahead
The Healthcare ITAD Field Guide covers the HIPAA disposal and media re-use rules, the PHI device map, and business associate agreements; the Data Destruction Field Manual covers NIST 800-88 clear, purge, and destroy by media type; and the value-share program explains how remarketing proceeds offset a disposition program. The written companion to the session’s inventory discussion is our brief on the proposed HIPAA Security Rule’s asset-inventory requirement.