Xperien warned delegates at the ITWeb PoPI Update that it's time to comply now that the POPI Act has been signed by the President and is now law.
The PoPI Act regulates how companies handle, keep and secure personal information and was already signed into law three years ago. With the appointment of the Information Regulator, companies urgently need to upgrade their information technology security systems as a result of the Act.
Bridgette Vermaak, head of IT asset disposal at Xperien, presented a paper to help companies how to comply with the PoPI Act and also how to reduce the total cost of ownership. She also showed how she helped and re-engineered the processes at a prominent South African retail bank.
She pointed to the development of an IT Asset Disposal (ITAD) policy as a key to clearly establishing the scope of the project. "Detailed planning is crucial to facilitate communication between the numerous teams involved, from decommissioning to certification."
"Optimising resources at the bank was only possible by providing process security sensitive options to total data destruction. Reverse logistics was made simple through this approach, ensuring zero storage and mitigation of risk during the chain of custody, executing national collections with options for low-risk items," she explained.
Xperien also did a live demonstration with its mobile hard drive shredder truck, a fully equipped PoPI compliant truck that provides on-site degaussing and destruction facilities. This is the only truck of its kind in SA with this technology.
The truck offers mobile data destruction services that include the physical shredding of 300 hard drives, 500 data tapes, USB sticks and up to 400 mobile phones every hour. The mobile facility also offers the digital shredding of hard drives, solid state drives and data tapes and also the degaussing of HDD and tapes.
Vermaak says the main advantage this truck brings to data security is that it eliminates the need to provide a chain of custody for the client data because the truck comes to the clients premises.
"Hard drive made of aluminium, steel and other metal alloys require huge amount to shred into tiny pieces and would normally happen in industrial factory," she concluded.