https://promo.ccrcyber.com/articles/ ITAD, data destruction, and compliance analysis from CyberCrunch. en-us Wed, 19 Aug 2026 12:58:44 +0000 https://promo.ccrcyber.com/articles/cybercrunch-newsletter-august-2026 https://promo.ccrcyber.com/articles/cybercrunch-newsletter-august-2026 Tue, 18 Aug 2026 00:00:00 +0000 The August 2026 CyberCrunch newsletter: introducing the new Technology Staging & Deployment service, major updates to the CyberCrunch Resource Hub, and the new federal export restrictions on recoverable critical minerals — black mass and tungsten waste and scrap — taking effect August 27, 2026 under a BIS allocation order. https://promo.ccrcyber.com/articles/critical-minerals-export-restrictions-itad https://promo.ccrcyber.com/articles/critical-minerals-export-restrictions-itad Wed, 05 Aug 2026 00:00:00 +0000 On July 30, 2026, a presidential determination under Section 101 of the Defense Production Act declared recoverable critical minerals and materials — including black mass, end-of-life rare-earth permanent magnets, swarf, and other waste and scrap containing critical minerals — to be scarce and critical materials essential to the national defense, and delegated authority to the Secretary of Commerce to implement the finding, including instituting export restrictions. This brief explains what the determination says, the supply-chain rationale behind it, why the named materials are exactly what retired IT equipment contains, and the role e-waste recycling and IT asset disposition could play as domestic recovery of critical minerals becomes a national strategic priority. https://promo.ccrcyber.com/articles/it-hardware-staging-deployment https://promo.ccrcyber.com/articles/it-hardware-staging-deployment Thu, 30 Jul 2026 00:00:00 +0000 IT hardware prices are rising: TrendForce reported DRAM contract prices up 13–18% and NAND up 10–15% quarter-over-quarter for 3Q 2026, analysts describe the component shortage as structural rather than cyclical — potentially lasting into 2027 — and tariffs add further pressure on vendor pricing. This article explains when purchasing equipment ahead of need makes sense for an IT budget, why on-site storage is the wrong answer for staged hardware, what a technology staging and deployment program looks like, and introduces CyberCrunch's new Technology Staging & Deployment service: secure facility storage for a flat monthly fee with inventory by site and brand, delivery on the client's rollout schedule, optional on-site installation, same-visit removal of retiring equipment for certified NAID AAA destruction, and pairing with Mail Back kits. https://promo.ccrcyber.com/articles/naid-aaa-cybersecurity-requirements-2026 https://promo.ccrcyber.com/articles/naid-aaa-cybersecurity-requirements-2026 Wed, 29 Jul 2026 00:00:00 +0000 Effective October 1, 2026, i-SIGMA is enhancing the cybersecurity requirements within its NAID AAA and PRISM Privacy+ Certification standards. The update adds a documented cybersecurity policy and training requirement with per-employee attestations (new Section 1.29), extends access control to explicitly cover servers, storage devices, and network equipment (Section 2.1), strengthens the annual third-party network security verification with named controls — least privilege, multi-factor authentication, antivirus, firewall, endpoint detection, and patch management (Section 3.2) — and introduces workstation access control and identity access management requirements for holders of the NAID AAA Erasure and Degaussing endorsements. This brief explains what is changing section by section, why i-SIGMA is aligning the certification to risk beyond the shred floor, what the update means for organizations that buy destruction and ITAD services, and how certified providers should prepare before the effective date. https://promo.ccrcyber.com/articles/pa-solar-decommissioning-act-44 https://promo.ccrcyber.com/articles/pa-solar-decommissioning-act-44 Wed, 22 Jul 2026 00:00:00 +0000 Act 44 of 2026 makes solar developers — not landowners — responsible for end-of-life, echoing Pennsylvania's Covered Device Recycling Act and the lifecycle logic of IT asset disposition. https://promo.ccrcyber.com/articles/microsoft-registered-refurbisher-2026 https://promo.ccrcyber.com/articles/microsoft-registered-refurbisher-2026 Wed, 22 Jul 2026 00:00:00 +0000 CyberCrunch is certified through SMART as a Third Party Refurbisher under the Microsoft Authorised Refurbisher framework for 2026–2027 — genuine licensing, verified sanitization, and higher resale value on remarketed laptops and PCs. https://promo.ccrcyber.com/articles/cmmc-phase-2-suspension-itad https://promo.ccrcyber.com/articles/cmmc-phase-2-suspension-itad Tue, 14 Jul 2026 00:00:00 +0000 On July 13, 2026, the Department of Defense suspended CMMC Phase 2 requirements — including the November 10, 2026 third-party C3PAO certification deadline — along with Phase 3 and Phase 4 milestones, pending a 60-day review by a new CMMC Reform Task Force. Phase 1 self-assessments, NIST SP 800-171 Rev 2, DFARS 252.204-7012, SPRS scoring, and False Claims Act exposure all remain in force. This brief explains what changed, what survives, why prime contractor flowdown requirements continue, and why disposition evidence under control 3.8.3 matters more, not less, in a self-attestation regime. https://promo.ccrcyber.com/articles/apple-openai-lawsuit-itam-lessons https://promo.ccrcyber.com/articles/apple-openai-lawsuit-itam-lessons Mon, 13 Jul 2026 00:00:00 +0000 Apple's July 2026 trade secret lawsuit against OpenAI alleges, among other things, an unreturned company laptop used to download confidential files after departure, hardware components brought to job interviews, pre-departure self-emailing of confidential information, and an internal offboarding document repurposed to evade exit security. This article maps each allegation to the IT asset management, information security, and IT asset disposition control it implicates — asset recovery verification, access revocation timing, component-level physical control, restricted file access, and offboarding process integrity — without prejudging the merits of the case. https://promo.ccrcyber.com/articles/what-is-used-it-equipment-worth https://promo.ccrcyber.com/articles/what-is-used-it-equipment-worth Thu, 02 Jul 2026 00:00:00 +0000 What used IT equipment is worth: the six drivers that set resale value, the monthly decay curve, and the settlement paperwork that makes a revenue share verifiable. https://promo.ccrcyber.com/articles/data-center-decommissioning-checklist https://promo.ccrcyber.com/articles/data-center-decommissioning-checklist Thu, 02 Jul 2026 00:00:00 +0000 A phase-by-phase checklist for decommissioning server rooms and data centers: pre-project inventory reconciliation and stakeholder planning, data mapping and sanitization method selection, logical decommissioning, physical de-installation, chain of custody, serialized certificates of sanitization and destruction, value recovery, and sustainability reporting. https://promo.ccrcyber.com/articles/office-closure-it-checklist https://promo.ccrcyber.com/articles/office-closure-it-checklist Thu, 02 Jul 2026 00:00:00 +0000 An IT-focused checklist for office closures and consolidations, organized as a T-90 to T-0 timeline: asset inventory and sweep, lease and landlord data-security obligations, copier and printer lease returns, network and security equipment, employee device recovery, donation and remarketing decisions, on-site or facility-based data destruction, and the closeout records. https://promo.ccrcyber.com/articles/itad-breach-case-files https://promo.ccrcyber.com/articles/itad-breach-case-files Thu, 02 Jul 2026 00:00:00 +0000 Three fully documented cases where improper IT asset disposition became a data breach: Morgan Stanley's 2016 and 2019 decommissioning failures (over $160 million in penalties and settlements), Health Net's nine missing server drives (2011, 1.9 million individuals), and the Brighton and Sussex NHS Trust hard drives sold on eBay (record ICO fine) — with the specific control failures behind each and the safeguards that would have prevented them. https://promo.ccrcyber.com/articles/r2v3-vs-e-stewards-vs-naid-aaa https://promo.ccrcyber.com/articles/r2v3-vs-e-stewards-vs-naid-aaa Thu, 02 Jul 2026 00:00:00 +0000 A plain comparison of the three certifications that dominate ITAD vendor evaluation: R2v3 (administered by SERI), e-Stewards (administered by the Basel Action Network), and NAID AAA (administered by i-SIGMA) — who runs each, what each audits, how they treat data security and exports, how they overlap, and how to verify any of them by certification number. https://promo.ccrcyber.com/articles/onsite-vs-offsite-data-destruction https://promo.ccrcyber.com/articles/onsite-vs-offsite-data-destruction Thu, 02 Jul 2026 00:00:00 +0000 On-site vs. off-site data destruction: when witnessed shredding is worth the premium, what sealed chain of custody does, and how to split a program by media class. https://promo.ccrcyber.com/articles/nist-800-88-explained https://promo.ccrcyber.com/articles/nist-800-88-explained Thu, 02 Jul 2026 00:00:00 +0000 A practical explainer of NIST SP 800-88, Guidelines for Media Sanitization: the Clear, Purge, and Destroy methods, how to choose by media type and data sensitivity, what Revision 2 (September 2025) changed versus Revision 1, verification and certificates of sanitization, and a checklist for running a defensible sanitization program. https://promo.ccrcyber.com/articles/merger-acquisition-itad https://promo.ccrcyber.com/articles/merger-acquisition-itad Thu, 02 Jul 2026 00:00:00 +0000 How IT asset disposition fits mergers, acquisitions, and divestitures: assessing disposal practices and inherited liability during diligence, Day-1 device control, the consolidation wave of duplicate infrastructure and offices, entity naming on certificates during transition, license harvesting, and data separation in carve-outs and divestitures. https://promo.ccrcyber.com/articles/how-to-write-an-itad-rfp https://promo.ccrcyber.com/articles/how-to-write-an-itad-rfp Thu, 02 Jul 2026 00:00:00 +0000 How to write an ITAD RFP: the scope numbers bidders need, evidence requirements, one mandated pricing structure, weighted evaluation, and the one-document test. https://promo.ccrcyber.com/articles/how-long-does-itad-take https://promo.ccrcyber.com/articles/how-long-does-itad-take Thu, 02 Jul 2026 00:00:00 +0000 How long ITAD takes, clock by clock: scheduling, processing, certificates, and settlement — what compresses each stage and the delays that are actually preventable. https://promo.ccrcyber.com/articles/itad-pricing-explained https://promo.ccrcyber.com/articles/itad-pricing-explained Thu, 02 Jul 2026 00:00:00 +0000 How ITAD pricing actually works: per-device, per-pound, flat-project, and revenue-share models — the incentives each creates, and what moves your number. https://promo.ccrcyber.com/articles/free-e-waste-pickup-for-businesses https://promo.ccrcyber.com/articles/free-e-waste-pickup-for-businesses Thu, 02 Jul 2026 00:00:00 +0000 Free e-waste pickup for businesses has a funding source — usually your equipment's resale value. When free is fair, when it isn't, and what should never be waived.