1. Introduction At Sicher, Inc., we are committed to safeguarding the privacy and security of our clients’ sensitive data throughout the entire hard drive destruction process. This privacy policy outlines our practices and procedures to ensure the safe and secure handling of hard drives, in compliance with relevant laws and regulations, including NIST 800-88 Rev 1.
2. Information Classification and Protection We classify all client data as highly confidential. This classification mandates stringent protection measures to ensure that all data remains secure from unauthorized access, disclosure, or destruction. Only authorized personnel have access customers’ target data in which it is promptly destroyed via a Shred Tech ST5 Portable Shredder.
3. Security in Human Resources All Sicher, Inc. employees undergo comprehensive background checks and receive regular training on data security and privacy policies. Employees regularly attend security meetings such as ISSA and ISACA. Employees are required to adhere to strict confidentiality agreements and are continuously educated on the latest security practices and compliance requirements.
4. Physical Security Requirements Our vehicle is purpose built for destroying computer hard drives on-site at the customers’ location. It is equipped with a Shred Tech ST5 Portable Shredder in which it will safely and securely destroy any computer hard drive. The default method in which Sicher, Inc. destroys hard drives is to do it on-site at the customers’ location with a witness representing the customer present. If the customer elects for the target data to be destroyed off-site the hard drives are brought back to our facility and promptly destroyed so that there is minimal risk of a data leak.
5. Acceptable Use of Information and IT Devices Employees are required to follow company policies regarding the acceptable use of information and IT devices. All activities on company devices are monitored to ensure compliance with our security protocols.
6. Access Control Access to sensitive data and IT systems is restricted to authorized personnel only. Access rights are regularly reviewed and updated based on employee roles and responsibilities.
7. Authorized/Unauthorized Use and Disclosure of Data Authorized use and disclosure of data are strictly controlled and limited to the purposes for which the data was collected. Unauthorized use or disclosure of client data is strictly prohibited and subject to disciplinary action, including termination and legal consequences.
8. Incident Management and Response Procedures Sicher, Inc. has established comprehensive incident management and response procedures to address security and privacy incidents. In the event of a data breach or security incident, we promptly investigate, contain, and mitigate the impact. Clients are notified of any incidents that may affect their data security and privacy.
9. Compliance with Laws and Regulations We comply with all applicable laws and regulations, including NIST 800-88 Rev 1, which provides guidelines for media sanitization. Our data destruction processes meet or exceed these standards to ensure the complete and secure destruction of all data.
10. Retention and Destruction of Data Sicher, Inc. does not retain any data. All data-bearing devices are either destroyed on-site or immediately upon arrival at our facility. Our industry-standard shredding process ensures that all hard drives are thoroughly destroyed, making data recovery impossible. This guarantees the complete and secure destruction of your sensitive information without any retention.
11. Business Continuity and Disaster Recovery Sicher, Inc. maintains robust business continuity and disaster recovery plans to ensure that our services remain operational in the event of an unexpected disruption. These plans are regularly tested and updated to ensure the continued security and availability of client data.
12. Contact Information For any questions or concerns regarding our privacy policy or data handling practices, please contact us at:
Sicher, Inc.
26602 Via Mondelo
Mission Viejo, CA, 92692
Tanner@SicherShredding.com
(949) 310-9785
By choosing Sicher, Inc., you can trust that your data is handled with the highest level of security and professionalism. We are committed to protecting your privacy and ensuring the secure destruction of your sensitive information.