Trusted standards for secure and compliant IT Asset Lifecycle Management

Organisations need confidence that their IT assets are managed securely, responsibly and in accordance with industry requirements throughout their lifecycle. Iron Mountain’s Asset Lifecycle Management (ALM) services are supported by a comprehensive framework of certifications and standards that help ensure data security, regulatory compliance, environmental responsibility and operational excellence. Explore the certifications that demonstrate our commitment to protecting sensitive information, reducing risk and maximising the value of retired IT assets.

ALM certifications and standards

ISO Certifications

• ISO 9001 – Quality Management System (QMS)

  An internationally recognised standard that ensures organisations have consistent, documented processes focused on quality, customer satisfaction and continuous improvement.

• ISO 14001 – Environmental Management System (EMS)

  A global standard for managing environmental responsibilities, helping organisations reduce environmental impact, improve resource efficiency and support sustainable operations.

• ISO 27001 – Information Security Management System (ISMS)

  A leading information security standard that establishes a framework for protecting sensitive data through risk management, security controls and governance practices.

• ISO 28000 - Security Management System (SeMS)

  An international standard that establishes the requirements for a security management system (SeMS), which also includes aspects that are crucial for the security and resilience of supply chains.

• ISO 45001 – Occupational Health & Safety Management System (OHSMS)

  An international standard designed to improve workplace safety by identifying risks, preventing incidents and creating safer working environments.

IT Asset Disposition & Data Security Certifications

• NAID AAA Certification

  A globally recognised certification for secure data destruction providers that verifies organisations follow strict processes for protecting and permanently destroying sensitive information.

• ADISA Certified Data Sanitisation

  A certification program focused on secure data sanitisation and IT asset disposition practices, validating that data is securely removed before devices are reused, resold or recycled.

• NCSC Assured Sanitisation Service (CAS-S) Certification

  A certification from the UK’s National Cyber Security Centre that recognises approved data sanitisation services designed to securely remove information from storage devices.

• NIST SP 800-88 Media Sanitisation Guidelines

  Industry-recognised guidelines from the National Institute of Standards and Technology that define best practices for securely clearing, purging or destroying data stored on electronic media.

Electronics Recycling & Sustainability Certifications

• R2v3 – Responsible Recycling / Sustainable Electronics Reuse & Recycling

  A leading electronics recycling standard that promotes responsible reuse, refurbishment, recycling, data security and environmental practices for retired technology.

• e-Stewards Certification

  A certification for responsible electronics recycling that emphasises secure data destruction, environmental protection and ethical handling of electronic waste.

• RIOS – Recycling Industry Operating Standard

  A comprehensive management system standard that combines quality, environmental, health and safety practices specifically for recycling operations.

• EN 50625 - Waste Electrical and Electronic Equipment

  An European standard that establishes the requirements for the collection, handling, de-pollution, and recycling of electronic waste (WEEE) across treatment centres.

Teraware Data Sanitisation Platform

• NIST 800-88: Once every asset to be decommissioned has been identified, Teraware goes to work. Teraware’s agent-based architecture scales to any size job; whether it’s one drive or 100,000, Teraware erases all drives concurrently, minimising customer data exposure risk window. NIST 800-88 is descriptive with regard to media types, chain of custody, methods of destruction, and reporting. ITRenew follows NIST 800-88 and goes a step further, exceeding all industry standards and compliance.
• ADISA Certified Data Sanitisation: The Asset Disposal & Information Security Alliance (ADISA) offers accreditation to companies that maintain the highest standards in IT asset disposal and data sanitisation. Only nine companies worldwide are expected to achieve ADISA data sanitisation accreditation for both HDDs and SSDs in 2020.
  • Passed ADISA Threat Matrix Level 2: Iron Mountain's proprietary sanitisation platform, Teraware, is the only software to have done so for multiple types of SSDs and HDDs (incl. SATA-HDD, SAS-HDD, SATA-SSD, SAS-SSD, FC-SSD, and NVMe-SSD)
  • Only sanitisation platform to pass ADISA accreditation using the latest drive technologies (NVMe) and capacities (10TB+)
  • 17 Certificates for Forensic Data Erasure of SSDs and HDDs