WHAT'S NEW
Proper Hard Drive Destruction
 Heather Fitzanko

 

Did you know that one computer hard drive can easily contain the equivalent of a full semi-truck of documents? When you dispose of your old computers, you are also disposing of the sensitive data on their hard drives. If you are not properly destroying those hard drives, this data is easily accessible by anyone with even modest computer skills.

The amount of data stored on a hard drive is immense, and without a secure way of eliminating it, information breaches can result in embarrassment, financial loss and legal repercussions. Confused about how to achieve proper disposal, most organizations do nothing. A visit to any business’ storeroom or storage unit is verification of this.

Hard drive destruction is the process of rendering a computer hard drive completely unreadable upon disposal. Proper destruction of a hard drive is critical to protect any confidential information from theft or misuse. 

Disposal Options
There are four basic options for disposal:

  • Toss it in the dumpster. While an option, it is not a good one for two reasons. First of all, dumpster divers can gain access to the information on the hard drive, and secondly, contaminating landfills with electronic equipment is against the law.
  • Recycle by donation. Donating to a not-for-profit organization feels great and it’s free. However, allowing access to the information left on the hard drive can be very costly!
  • Recycle for scrap value. Although the computer has some value, it most likely will not be enough to cover the cost of transporting and disassembling it. Also, there is no guarantee that the information on the hard drive will be destroyed.
  • Hire a company certified for proper disposal of information-bearing media.While there are costs associated, they pale in comparison to the cost of fines, lawsuits or loss of customer loyalty due to an information breach.

Wiping, Formatting, Deleting 
Formatting, sanitizing or deleting will not make the data unrecoverable. The Massachusetts Institute of Technology (MIT) recently conducted research in which they bought 158 hard drives from eBay and other merchants to determine what data was contained in them. Of these hard drives, which originally belonged to banks and law firms, just 12 had their data completely eliminated. A wealth of information was retrieved from the rest, including credit card and social security numbers and medical records!

Likewise, formatting a disk does not sufficiently delete the actual data. Take an example of a 10GB hard disk with a total of 20,044,160 sectors. After formatting, only 21,541 sectors are completely overwritten. This is less than one percent of the total, meaning 99 percent of the data can be fully recovered. Furthermore, formatting will simply complicate the process of recovering the fragmented files; it will not prevent the theft of leftover data. Most people assume that an old hard drive has no sensitive data that can be extracted. But this is not the case, as the computers of today are able to read drives up to 15 years old. 
 
Hard Drive Destruction
The findings in the MIT report emphasize the need for proper hard drive disposal. Furthermore, there is a benefit from a compliance standpoint for using a third party with the proper qualifications. With each disposal event fully documented, an audit trail is created, establishing an ongoing standard for disciplined, secure disposal. iBi

A Family Tradition of Working Together

 

Family Tradition 

For three generations, the Simpson family has worked in family businesses. “My father worked with his father, and I worked with my father, so the opportunity for my son to work with me, I thought, was pretty neat,” said Tom Simpson, president of AAA Certified Confidential Security Corp. (CSC) in Peoria. “It’s kind of a family tradition.”

Tom’s grandfather, Lawrence Simpson, was one of the founders of Bennett Publishing Company, a small textbook publisher in Peoria that was eventually purchased by publishing giant McGraw-Hill. Throughout his years of ownership, he employed both his son, Richard, and grandson, Tom, with the latter continuing the family tradition by going into business with his own son.

The father-son duo of Tom and Chris Simpson have owned and operated CSC, a company that specializes in the secure destruction of confidential information, since 1994, when they purchased the business from its former owner, Don Eckhoff. At the time, Eckhoff was able to run the company out of a rented warehouse by himself with little help, and he had just a single truck. Since the Simpsons took over, the company has seen steady growth, and now has 15 employees and six trucks, not to mention a larger facility.

“All of the basics were there—the concepts, the ideas and a lot of the equipment,” said Tom of the business in 1994. Two years later, the Simpsons built their current building and upgraded the equipment to offer customers the latest security possible. CSC has purchased new equipment several times since, expanding their micro-media destruction capacity, adding a disintegrator; degaussers, which remove or neutralize magnetic fields; and a hydraulic press used in the destruction of computer hard drives.

Tom’s interest in buying the business was sparked because he was looking for a long-term project to replace the short-term marketing jobs he had been doing since his family’s publishing business closed down. After working a number of jobs around town, Chris, too, was interested in settling into a long-term career, so the two decided to go into business together.

Splitting the Duties
As president of the company, Tom is responsible for the management side of things, while Chris, as vice president, supervises the truck drivers and handles the plant side. Both men are active owners of the company, working alongside their employees every day. Chris drives one of the company’s trucks, while Tom shares an office with CSC’s other professional employees.

Unlike many secure destruction companies that destroy materials in their trucks at clients’ sites, CSC uses its trucks only to collect materials, bringing everything back to the plant for destruction. Other companies may spend less time transporting materials, but the Simpsons believe their procedures are more effective and secure. With a security system designed jointly by CSC and Caterpillar’s security division, the company records video of all of the plant’s operations, 24/7. Their upgraded equipment and security allow the Simpsons to guarantee that anything they collect will be destroyed beyond readability.

Materials are generally destroyed the same day they’re collected, as the trucks must go back out the next day to make more collections. If that means staying late or coming in on weekends until the work is done, that’s what the Simpsons do. “As a family business, you’ve got to be ready to do anything and everything, and do more than you expect out of your employees,” he said. “You have to work until you get the job done—that’s one of the positives and negatives of a family business.”

Having been involved in his family’s publishing business for 25 years, Tom knew both the benefits and the drawbacks of working with family going into the partnership with his son at CSC. Understanding those challenges, he decided it was worth the extra work. “I guess [my family doesn’t] know how to do anything different,” he mused. “We’ve all worked somewhere else, but we’ve all ended up working together with our families.”

Family First, Business Second
One of the downsides of working with family, noted Chris, is that familial relationships can be hard to overcome. “It’s difficult to step out of the ‘son’ role and be identified as a business partner,” he said. The Simpsons work through it, though, making an effort to satisfy not only those family members involved in the business and their employees, but also those family members who aren’t involved in the day-to-day operation of the business. Tom noted that when in business with family, it’s easy to forget that not everyone in the family is as passionate about the business as its owners are. Making sure to carve out time for family that doesn’t involve discussing the business is extremely important.

As co-owner of the only locally-owned business in central Illinois specializing in the protection and disposal of confidential information, Tom said he hopes people appreciate that fact. That they’ve been in this community all their lives, he said, gives them “a pretty good grasp of what the community needs and what the community expects.” 

After finding its place in the community and building up the business through word of mouth, Tom said they haven’t done much in the way of advertising. What little marketing they have done has been targeted at local businesses; they try to keep the general public from walking in off the street with small jobs, like shredding outdated bills. Even if you know CSC’s address, it’s easy to miss their nondescript warehouse on Industrial Road. There’s no big sign out front, nor on any of the company’s trucks. And so far, that’s worked out pretty well for the Simpsons.

Eighteen years after buying the business, Tom has no plans to retire anytime soon, but he does hope that when the day comes, Chris will be ready and willing to take over. iBi

2010 Outstanding Small Business Award

CSC President Tom Simpson received the award at the luncheon meeting. "I am honored to be selected out of a field of so many excellent local companies," Simpson stated. 

Summary: AAA Certified Confidential Security Corp (CSC) was honored to be named central Illinois� 2010 Outstanding Small Business with between 1 and 25 employees at the Heartland Partnership�s Annual Meeting. Confidential Security Corporation (CSC), a Central Illinois provider of secure information and document destruction services, continues to grow the secure destruction services it offers clients as well as its ability to assist clients in assessing their security processes and developing legally mandated, written information protection plans.

Peoria, IL � November 1, 2010 � AAA Certified Confidential Security Corp (CSC), a Central Illinois provider of secure information and document destruction services, was honored to receive the 2010 Outstanding Small Business Award at the Heartland Partnership Annual Meeting on October 6, 2010. This award recognizes a local central Illinois company that has between 1 and 25 employees, exhibits integrity and ethics in business, shows growth in sales and jobs and which has been in operation for at least five years. The award winners cannot be a division, subsidiary or franchise company and must be a member of the Peoria Area Chamber of Commerce.

CSC President Tom Simpson received the award at the luncheon meeting. "I am honored to be selected out of a field of so many excellent local companies," Simpson stated. "We work very hard to do what is best for our customers day-in and day-out - we do that because it is the right thing to do - it is core to our business philosophy and integral to our growth. So it is certainly special to be able to bring this award back to our plant and share it with our employees. We thank the Heartland Partnership for recognizing AAA Certified Confidential Security Corp and its employees in this way."

In naming AAA Certified as the recipient of the Outstanding Small Business Award, the Heartland Partnership described CSC in this way: "AAA Certified Confidential Security Corporation (CSC) is a commercial shredding company, started 26 years ago, long before identity theft became a major issue. It was the first information destruction service in the Peoria Area. It originally served as a paper shredding service to many banks and manufacturers, but it has grown to provide state-of-the-art security to a multitude of industries. AAA CSC has received numerous national and industry specific accolades including being a charter member of the National Association for Information Destruction. CSC has stayed on the forefront of this industry by adapting to the changes in technology and broadening its services to better service its customers. CSC is involved in numerous regional organizations and projects throughout the communities it serves."
 About AAA Certified Confidential Security Corporation:

Founded in 1984, CSC has doubled in size during the last five years and currently serves clients located in Illinois, from east to west border, north to Wisconsin and south to Quincy. CSC is a company of firsts. A charter member of the National Association of Information Destruction (NAID), CSC was the first company to be certified by NAID for secure information service. Tom Simpson, CSC President, a long-time member of NAID has held multiple leadership positions since its inception. CSC was also the first dedicated information destruction service in the US to be registered to the standards of the ISO Quality Management System. In 2005 CSC received the Peoria Better Business Bureau Torch Award for Business Integrity. CSC continues to grow the secure destruction services it offers clients as well as its ability to assist clients in assessing their security processes and developing legally mandated, written information protection plans. After secure document destruction, whenever possible, CSC recycles destroyed materials. Find CSC online at www.confidentialsecurity.com or contact them at (309) 691-0909.

###
 
 
Contact: Heather Fitzanko
309/691-0909

 

Certified to NAID standards 10th Consecutive Year
Confidential Security Corporation passes 10th certification audit.
 

Confidential Security Corporation (CSC), a Central Illinois provider of secure information and document destruction services, recently passed its tenth consecutive NAID certification audit. CSC is a charter member of the shredding industry's National Association for Information Destruction (NAID). CSC's President Tom Simpson chaired the Certification Committee in 2000 and he volunteered CSC to be the first NAID member to undergo the audit and certification process. In 2000, CSC became the first NAID-certified document destruction company.

 

 

Peoria, IL (August 11, 2010)  AAA Certified Confidential Security Corporation (CSC) recently successfully completed its

tenth NAID certification from the National Association for information Destruction. A charter member of NAID, CSC enjoys the distinction of being the first document shredding company to become NAID certified. In 2000, CSC President Tom Simpson chaired the Certification Committee and volunteered CSC to be the first NAID member to undergo the NAID audit and certification process.

NAID sets international standards for what constitutes secure destruction of information, a process required by many new federal laws including FACTA (Credit Report Info), HIPAA (healthcare) and Gramm-Leach-Biley (financial). The NAID Certification Program establishes standards and audits information destruction companies to ensure they are complying with these secure destruction processes. The audit covers areas such as operational security, employee hiring and screening, the destruction process, responsible disposal and insurance.

"We are proud to achieve our tenth NAID certification, but even more to have been the first document destruction company to become NAID certified," stated Heather Fitzanko, CSC Vice President. "NAID certification assures our clients that CSC is following the highest standards and maintaining the "legal chain of custody" in destroying critical documents, micro-media, hard-drives and other materials, in line with growing legal mandates."

"The legal requirements for secure document destruction now encompass many industries including attorneys, insurance agencies, financial institutions, doctor's offices, hospitals, pharmacies, and government agencies,"stated Fitzanko. "Any data breach may impose stiff financial penalties, but even more embarrassing for these companies are new requirements for them to publicize any breach of security. Our NAID affiliation and certification gives us the necessary tools to assess any business' security processes and to help them develop written information protection plans. Although not widely recognized, every major data protection law passed in the last three years requires affected organizations to have written information protection plans."

About AAA Certified Confidential Security Corporation:

Founded in 1984, CSC has doubled in size during the last five years and currently serves clients located in Illinois, from east to west border, north to Wisconsin and south to Quincy. CSC is a company of firsts. A charter member of the National Association of Information Destruction (NAID), CSC was the first company to be certified by NAID for secure information service. Tom Simpson, CSC President, a long-time member of NAID has held multiple leadership positions since its inception. CSC was also the first dedicated information destruction service in the US to be registered to the standards of the ISO Quality Management System. In 2005 CSC received the Peoria Better Business Bureau Torch Award for Business Integrity. CSC continues to grow the secure destruction services it offers clients as well as its ability to assist clients in assessing their security processes and developing legally mandated, written information protection plans. After secure document destruction, whenever possible, CSC recycles destroyed materials. Find CSC online at www.confidentialsecurity.com or contact them at (309) 691-0909.

Congratulations Cheryl Bower and Heather Fitzanko

AAA Certified Confidential Security Corp Announces Promotions

Confidential Security Corporation (CSC), a Central Illinois provider of secure information and document destruction services, announces the promotions of Cheryl Bower (formerly Management Representative) and Heather Fitzanko (formerly Director of New Business Development) to CSC Vice Presidents.

Peoria, IL (Vocus) September 19, 2010 -- AAA Certified Confidential Security Corporation (CSC), a Central Illinois provider of secure information and document destruction services, announced the recent promotions of Cheryl Bower and Heather Fitzanko, both to the position of Vice President. Bower previously served as Management Representative and Fitzanko as Director of New Business Development.

“Our growth has triggered a need to expand the roles of key personnel. These promotions to executive management status recognize the critical roles both Cheryl and Heather play in the corporation,” said CSC President Tom Simpson. “Bringing Cheryl and Heather into CSC’s Corporate Management will provide an opportunity for them to participate more fully in leading the corporation in the future.”

Bower, of Peoria, has worked for CSC for 15 years and has been responsible for assisting in all areas of management including the role of ISO management representative and authored CSC’s Quality Management Plan. Cheryl brings to CSC a background in newspaper publishing and commercial advertising. Additionally she has studied in the area of Quality Business Management

Fitzanko, a Tazewell county native, has worked for CSC since 2004. Her areas of responsibility include new business development and marketing. She is also a Compliance Policy Professional, authorized by the National Association for Information Destruction. In this capacity, she is a consultant to businesses writing compliance policies in response to federal information protection laws such as FACTA, HIPAA/HITECH, Red Flag Rules, and Graham Leach Bliley. Heather’s background in banking, logistics, and the airline industry provide a solid foundation for her work at CSC.

In addition, CSC’s executive management team includes Christopher Simpson, CSC Vice President. His area of responsibility is operational management.

About AAA Certified Confidential Security Corporation:
Confidential Security Corp. provides secure media and paper shredding services to its customers to prevent data breaches through information protection. CSC continues to grow the secure destruction services it offers clients as well as its ability to assist clients in assessing their security processes and developing legally mandated, written information protection plans. Founded in 1984, CSC has doubled in size during the last five years and currently serves clients located in Illinois, from east to west borders, north to Wisconsin and south to Quincy.

CSC is a company of firsts. A charter member of the National Association of Information Destruction (NAID), CSC was the first company to be certified. Tom Simpson, CSC President, has held multiple leadership positions since its inception. CSC was also the first dedicated information destruction service in the US to be registered to the standards of the ISO Quality Management System. In 2005 CSC received the Peoria Better Business Bureau Torch Award for Business Integrity.

After secure document destruction CSC recycles destroyed materials. Find CSC online at www.confidentialsecurity.com or contact them at (309) 691-0909.

###

AAA Certfied Confidential Security Corp
Heather Fitzanko
309-691-0909
 

Heather Fitzanko recieves CSDS Accreditation

Certified Secure Destruction Specialist®

 

SUMMARY: AAA Certified Confidential Security Corporation (CSC), a Central Illinois provider of secure information and document destruction services, is proud to announce that Heather Fitzanko, CSC Vice President, has successfully completed the Certified Secure Destruction Specialist® (CSDS) accreditation program. This CSDS designation recognizes an individual who has completed the CSDS training program and passed a test on a “broad range of disciplines related to secure destruction.”

Peoria, IL (March 24, 2011)AAA Certified Confidential Security Corporation (CSC), a Central Illinois provider of secure information and document destruction services, is proud to announce that Heather Fitzanko, CSC Vice President, has successfully completed the Certified Secure Destruction Specialist® (CSDS) accreditation program. The National Association for Information Destruction (NAID), a Phoenix-based trade association for the secure destruction industry first introduced this accreditation program in the fall of 2010. NAID created the CSDS accreditation “to promote and acknowledge a comprehensive understanding of the broad range of disciplines related to secure destruction.” The CSDS examination consists of 230 questions from seven separate areas.

“Becoming a CSDS is a major achievement,” says NAID CEO Bob Johnson. “Passing the examination requires an in-depth understanding of the secure destruction industry, including data protection legislation, secure destruction operations, physical security, records management, risk management, ethics and NAID Certification.” He adds, “While there are some industry professionals who have a grasp of one or another of these areas, it is a remarkable accomplishment to demonstrate expertise in all of them.”

“We commend Heather for receiving this accreditation. She is very knowledgeable about all aspects of our business — and is always available to assist our clients with their compliance policies and employee training in addition to setting up their data destruction programs,” said CSC President Tom Simpson. “Heather’s know-how makes it easy for our customers to meet their data security requirements in a painless, efficient manner.”

Fitzanko, a Tazewell county native, has worked for CSC since 2004.  Her areas of responsibility include new business development and marketing.  She is also a Compliance Policy Professional, authorized by the National Association for Information Destruction.  In this capacity, she is a consultant to businesses writing compliance policies in response to federal information protection laws such as FACTA, HIPAA/HITECH, Red Flag Rules, and Graham Leach Bliley. The new CSDS accreditation enhances her knowledge in these areas. Heather’s background in banking, logistics, and the airline industry provide a solid foundation for her work at CSC.

About AAA Certified Confidential Security Corporation:

AAA Certified Confidential Security Corp. provides secure media and paper shredding services to its customers to prevent data breaches through information protection. CSC continues to grow the secure destruction services it offers clients as well as its ability to assist clients in assessing their security processes and developing legally mandated, written information protection plans. Founded in 1984, CSC has doubled in size during the last five years and currently serves clients located in Illinois, from east to west borders, north to Wisconsin and south to Quincy.

CSC is a company of firsts. A charter member of the National Association of Information Destruction (NAID), CSC was the first company to be certified. Tom Simpson, CSC President, has held multiple leadership positions since its inception. CSC was also the first dedicated information destruction service in the US to be registered to the standards of the ISO Quality Management System. In 2005 CSC received the Peoria Better Business Bureau Torch Award for Business Integrity. In 2010, CSC was named central Illinois’ Outstanding Small Business by the Peoria Chamber of Commerce at the Heartland Partnership’s Annual Meeting.

After secure document destruction CSC recycles destroyed materials. Find CSC online at www.confidentialsecurity.com or contact them at (309) 691-0909.

###

For more information, please contact: 

Heather Fitzanko      309/691-0909


 

Why is Data Security So Important

Have you been victim of ID theft or do you know someone who has?

The Federal Trade Commission reports over nine million people nationwide fall victim to ID theft each year. When we think of ID theft, the first thing that comes to mind is computer hackers—high-tech criminals with gadgets and gizmos that crack firewalls and steal the credit card numbers of online buyers.

We think of TJX Companies. Last March, TJX reported that 45.6 million credit and debit card numbers were stolen from one of its systems over a period of more than 18 months.

However, an estimated 50 to 70 percent of reported identity theft cases can be traced to residential trashcans and commercial dumpsters. An investigation by Kentucky’s Attorney General reported that out of 121 dumpsters that were searched, over 33 percent held more than 500 records containing personal information.

In April 2007, a study conducted by Javelin Research Group reported that more than 75 percent of consumers polled will cease doing business with retailers and merchants who experience a data breach.

In a six-month investigation into prescription privacy, pharmacy dumpsters were inspected in more than a dozen cities across the nation. The search uncovered 2,394 patient records from unsecured dumpsters. The nation’s three largest drugstore chains—CVS, Walgreens and Rite Aid—said they would take immediate steps to secure patient information. The U.S. Department of Health and Human Services’ Office of Civil Rights, as well as the Indiana Attorney General’s office, has launched independent investigations. The Indiana Board of Pharmacy filed complaints against 30 Indianapolis-area pharmacies.

According to an article in the Pacific Business News on March 21, 2007, Stephen Marn, who paid a handyman to take boxes of confidential records to the dump, has been formally accused of violating Hawaii’s consumer protection laws. The DCCA alleges that Marn broke not one, but several, state laws, including the new “dumpster-diving law” that requires companies to dispose of records by burning or shredding them. It calls for fines of up to $2,500 per violation.

Last May, two teenagers stole a laptop from the Department of Veterans Affairs that contained financial information on more than 25 million veterans, as well as people on active duty.

Rebecca Martin, president of A&I Travel Services, watched as piles of her business’s paperwork took flight along Poplar Avenue in Memphis. Most of the pink papers being picked up by employees were travel receipts with personal information including names, addresses, telephone and credit card numbers.

No company wants newspaper headlines like this. Negative publicity can, no doubt, affect profitability. Fines for privacy regulation violations and civil penalties could reach upwards of $50,000.

Between 2000 and 2003, 182 cases of consumer privacy litigation were brought against 234 corporate defendants, with $160 million paid out in damages, according to Privacy and American Business, Consumer Privacy Report, 2004.

Act Now!

  1. Identify what information your organization collects and what regulations apply
  2. Adopt information security and privacy policies
  3. Define and document organizational roles and responsibilities
  4. Contact professionals who can assist in information protection, retention and disposal.
     

An ounce of prevention is worth a pound of cure. The bottom line is your bottom line. IBI