Asset Disposal and Information Security Alliance reports first companies to pass benchmark with more to follow

The ADISA Standard, launched in January 2011, is a rigorous audit of an IT Asset Disposal (ITAD) company's service to assess the robustness of the process before awarding them certification. The standard has been conceived and produced from a risk management perspective and seeks to drive best practices in the data sanitisation and IT disposal sector.

The 4 new certified ADISA members passed an exhaustive study of their data sanitisation processes and practices including:

• On-Site Services
• Pre-screening of insurance and business credentials
• Pre-Collection Criteria
• Logistics
• External Site Survey
• Internal Security
• Process
• Software Systems
• Environmental
• Reporting

The ADISA Standard has been introduced to encourage and promote commercial best practice in the area of IT Asset Disposal. Formulated and formalised by the ADISA executive team in partnership with its Advisory Council, the ADISA standard references other relevant industry publications, government and commercial standards and specifications to deliver the first comprehensive industry specific standard.

John Sutton, Chairman of ADISA and author of the standard, said, "We are delighted to be able to name the first 4 ADISA members to achieve certified status. ADISA has a further 6 UK and 2 European companies currently working towards certification in May and June. In addition there are a significant number of other ITAD organisations interested in progressing through the certification process in the summer. ADISA certification shows that these companies have

passed an independent audit of their service and demonstrates their commitment to best commercial practices in asset disposal."

Steve Mellings, founder adds, "Asset disposal is an all too often overlooked part of information security. Since our launch we have been championing this discipline as one requiring increased focus and budget allocation by data controllers and service providers alike. This means not just end of life, end of lease or vendor trade in but any situation in which an asset is handed to a third party for processing, including mid-life scenarios such as warranty RMA."

"Companies spend millions annually on network security yet still consider asset disposal an afterthought or even a necessary waste stream. However, when the focus moves away from the asset to the data itself attitudes change and companies quickly realise that data carrying assets handed to any third party without proper controls in place is quite simply a breach waiting to happen."

For further information on the ADISA Standard, please see here.

About ADISA

ADISA is an alliance of professionals which operates for and between asset owners, data controllers and providers of asset disposal services. ADISA has a mission to promote best practice and self-regulation in the IT Asset Disposal sector and our certification process is the most complete and through standard available in this sector.

Launched in October 2010 ADISA initially focussed on creating a standard for the IT Disposal Industry itself but is now working with asset owners (leasing) and manufacturers to promote and champion best practice. This will be added to by the release of a new data controller standard in Q3 2011 which looks to regulate the entire disposal process from client side.

ADISA offers membership to industry, data controllers, asset owners and manufacturers which allows access to different services. Each member has access to the latest industry-relevant news and regulatory updates, plus the views and expertise of the ADISA Advisory Council. ADISA membership offers the chance to play an active part in the foremost asset disposal and information security group in the sector.

For further information please visit www.adisa.org.uk.

Media Contact

Steve Harris

ADISA Communications Director

steve.harris@adisa.org.uk