This sample policy contains guidelines and responsibilities associated with an organization’s technology acquisition and disposition process.
Sample responsibilities include: Data stored at offsite facilities is periodically reviewed and compared to the data retention policy; a list of proposed data/media items for disposition is provided to accounting for review; any hard drives that were removed from computer assets will be periodically proposed for disposition; and approved data/media to be disposed of will be sent to a third party who will remove the data and/or destroy the drive and provide certification of the action taken.