...
Sanitizing Media for Removal
Media is sanitized before before leaving the secured facility. This includes returning disks to vendors or repurposing equipment.
Wiping is done on a dedicated workstation in the facility by a method approved by the security office.
Anyone may start the process to remove media from the facility, but it follows the following process.
- A request with the reason for removal is sent to the building manager who approves or rejects. If necessary, they fill out the RMA paperwork now.
- The HIPAA liaison approves or rejects the request.
- If approved, a system administrator in the covered entity wipes the drive and notes when and by whom it was securely wiped.
- The media is given to the building manager who closes the workflow and sends the drive on. Email is sent to all parties involved.