My org insists that the disks of all obsolete machines are destroyed and the rest of the hardware sent for disposal.
I have a few systems that could be wiped and given away for charity but that’s not allowed.
This seems incredibly wasteful to me.
https://twitter.com/SwiftOnSecurity/status/56891586200393318... (2015)
https://twitter.com/SwiftOnSecurity/status/11917713453627965... (2019)
i think swift had another post about it a bit more recently but i cannot find it now
if you encrypt the disk at the os level, you only need to throw away the keys, ie: reformat the drive. no need to physically erase as what is store is just noise once the keys are gone.
But even more common in large companies is that it’s all on leases and goes back to the leasing company to be liquidated on eBay; you can always find miles of three or five year old gear there.
it substitutes the internal network/hierarchy bias for a mostly monetary one