We have an on site visit next week with a service provider who collect our redundant IT kit and take it to their base for destruction and/or recycling. We are going to their premises on the other side of our city.
I could do with a thorough checklist of controls that must be in place to ensure our drives cannot go missing. Plus any logs I can go through that should be in place.
If anyone can provide such that would be much appreciated. Or if you have done any assessment on partners/suppliers physical sites for your work any such check list you went through (plus any common weaknesses).
PS - as a bit of a side issue. In your comapnies, aside from when a device is classed as redundant, i.e. scrap this machine and wipe the drive. What other business exampels are there when your data in whatever form goes "offsite" ?