An IT administrator at a financial services company is decommissioning a batch of servers that stored sensitive customer data. The physical hard drives have been removed and securely shredded. The administrator must now select a third-party vendor to dispose of the remaining server chassis and components. Which of the following is the MOST crucial factor in the selection process?
The vendor has the highest level of liability insurance against data breaches during transit.
The vendor's offered payment for the scrap components provides the best return on investment.
The vendor provides a certificate of recycling and a documented chain of custody.
The vendor is certified to be compliant with all local and national environmental regulations.
The correct answer is that the vendor must provide a certificate of recycling and a documented chain of custody. When decommissioning servers, especially those from a regulated industry like finance, providing a clear, auditable trail is paramount. A certificate of destruction or recycling, along with chain of custody documentation, serves as legal proof that the company performed its due diligence in disposing of the assets securely and in an environmentally compliant manner. While environmental compliance is mandatory, the certificate is the document that proves it. Since the data-bearing media has already been destroyed, the immediate risk of a data breach from the remaining components is low, making insurance for that specific risk less critical than the proof of disposal. Cost and revenue are business considerations but are secondary to compliance and liability.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
Why is a certificate of recycling and chain of custody important for server decommissioning?
Open an interactive chat with Bash
What does chain of custody mean in IT asset disposal?
Open an interactive chat with Bash
Why is environmental compliance less critical than having a certificate of recycling?