The Shred Easy Blog

Posts Tagged ‘shredding services’

Security experts are warning that the upcoming November tube strikes could result in widespread corporate confidential information and confidential data loss, as workers transport confidential information in chaotic conditions.

Fresh talks were scheduled to avoid a third London-wide tube strike, which would cause commuters to arrive late, leave early and work whilst on public transport.

Many workers will choose to access their company systems remotely via their laptops, BlackBerrys, iPads and USB sticks. This means that staff will be carrying around vast amounts of confidential information.

Jim Watson, managing director of Shred Easy, the UK’s leading shredding services and confidential document destruction companies said:

“Workers must be aware of transporting devices containing secure information around the city. I urge all businesses to brief their employees and offer training about how to deal with secure confidential data. My advice is to back up any secure data and keep a watchful eye on gadgets at all times.

“For far too long we’ve witnessed major breaches of secure confidential information security, the leaking of confidential information and the embarrassment of various organisations. If you are in a position of handling, transporting and the secure disposal of confidential data, it is up to you to protect that confidentiality.”

London Underground and union leaders from RMT and TSSA are due to sit down with conciliation service ACAS this week to try and reach a compromise agreement to avoid strikes.

The threat of a £500,000 fine from the ICO is preying on everyone’s minds. And unfortunately, there are some ruthless shredding services companies out there jumping on the bandwagon by offering what they claim to be a secure document destruction solution…

But before agreeing to what, on the surface may seem a good deal, dig a little deeper and consider the following;

1.            Is the shredding company accredited?

Check if the shredding company you’re considering is registered with the British Security Industry Association (BSIA), the United Kingdom Secure Shredding Association (UKSSA) and the National Association of Information Destruction (NAID). As an accredited member, companies offering shredding services are required to adhere to stringent standards including EN15713. This ensures the security of all aspects of their business; from their premises, vehicles and employees through to the size the materials are shredded to.

2.            Will you be provided with evidence of document destruction?

Following document destruction, you should be issued with a certificate of destruction detailing the type of material destroyed, the amount destroyed and the date it was destroyed on. Each document destruction certificate should also contain a unique reference number which means you are provided with a complete audit trail of the shredding service.

3.            Are their employees security checked?

Due to the secure nature of the role, it’s important to ensure the personnel handling your confidential information are security cleared. Check if they are cleared to EN15713 standard “Security Screening of Personnel Employed in a Security Environment”and if they have completed Criminal Records Bureau disclosures or Disclosure Scotland.

4.            Do they offer an on-site shredding service?

Using an on-site document destruction company guarantees the security of your documents – your confidential, sensitive material is destroyed on site and in your view.

If an off-site service suits you better, make sure the material collected is destroyed within 24 hours. Also, ensure the transportation of the material is “trackable” and the document destruction and recycling facility itself is fully secure.

5.            Does the shredding company provide secure storage containers?

Are these containers secure and lockable? Are they high quality and do they look good? Will they help you decide how many you need and will they fit in with the rest of your office furniture?

6.            Can they provide a national and flexible service?

Is the mobile shredding company regularly in your area? Do they have a base in the area? Check to ensure that alongside a regular scheduled shredding service, they have the flexibility and capacity to accommodate ad hoc collections and large “clutter clearouts”.

7.            How environmentally friendly are they?

Review their green credentials. Check if they have ISO14001 status. What happens to your materials once they’re destroyed – are they recycled? Do they operate a tree planting scheme? Do they operate green routes as well as using lighter, quieter vehicles to further reduce their carbon footprint?

8.            Will they securely destroy other media?

Its not just paper that contains sensitive and confidential information. Hard drives, memory sticks, CDs/DVDs and laptops can all still store confidential files even after deletion and should be completely destroyed.

9.            What insurances do they have?

Make sure the shredding company you decide to use is properly covered. Check they have up to date employers’ liability, public liability and product liability. Professional indemnity insurance is also a bonus.

10.          How do they manage their processes?

ISO9001 is the internationally recognised standard for quality management and by working with an ISO9001 registered shredding company you can be assured quality and customer focus is at the forefront of what they do.

SECURITY experts are warning all organisations to beware of unregulated one man bands entering the data destruction sector and urge all businesses to use British Security Industry Association (BSIA) fully accredited shredding companies.

As ID fraud and security move higher up the news agenda a plethora of shredding companies have entered the confidential data destruction market to capitalise on this. This coupled with the news that businesses of all sizes are trying to reduce costs, means a host of companies could be looking to employ cheaper off site shredding companies to destroy public confidential information.

Recent data security breaches include last week’s news that police were investigating the contents of a computer memory stick said to contain sensitive anti-terror material which was reportedly found in the street outside a police station in Stalybridge, Greater Manchester. Furthermore Zurich Insurance was recently fined £2.3m by the Financial Services Authority (FSA) for losing personal details of 46,000 customers.

Jim Watson, managing director of Shred Easy, one of the UK’s largest confidential data destruction companies, said:

“These non regulated one man bands may offer a cheaper shredding service at the outset but do you know how secure your data is? Ask your data destruction company to provide you with an on site shredding service so you can see your waste being destroyed. Also demand a Certificate of Destruction which confirms the time and date of the destruction. When you’re dealing with highly sensitive information like medical records, addresses and bank details it’s imperative they are securely destroyed.

“I’m calling for greater recognition of accreditation in the security sector. Look out for shredding companies who have BSIA / UKSSA / NAID certification. This ensures a high quality and reliable data destruction service that’s delivered by fully qualified shredding businesses guaranteeing peace of mind.”

Daren Wood, northern regional general manager at the BSIA, said:

“We would advise any businesses dealing with confidential data to choose a trusted information destruction supplier who will dispose of it correctly and in accordance with current laws. The BSIA is a great place to start when sourcing a reputable shredding service supplier, as all of our members meet strict criteria and adhere to high standards of quality.”

Key questions to ask a data destruction company before employing them:

- How does the company recycle the data?

- Can you see the data being destroyed in front of you?

- What proven quality and Security Association membership does the shredding provider have?

- Who is handling your data? What checks have been carried on the operatives?

- Can the company provide client references?