Insights
SureDispose Team
Articles
By this authorGovernment
FedRAMP and ITAD: How Cloud Authorization Boundaries Affect On-Prem Asset Disposition for Federal Agencies
When a federal agency migrates a workload from on-premises infrastructure to a FedRAMP-authorized cloud service, the workload’s data security controls move with it; partly. The cloud service inherits FedRAMP authorization…
Read article →Government
GSA Acquisition Vehicles for ITAD: Schedule 36 vs Schedule 70 vs MAS Consolidation
A federal contracting officer looking to procure IT asset disposition in 2018 had to know two schedule numbers. One for IT services (Schedule 70). One for office and document solutions,…
Read article →Government
DoD 5220.22-M and Modern Solid-State Storage: Why the 1995 Standard Doesn’t Sanitize SSDs
“Wipe to DoD standard.” It is one of the most persistent phrases in federal and federal-adjacent ITAD procurement, appearing in statements of work and disposition policies that have not been…
Read article →Healthcare
EHR Decommissioning Under HIPAA: Migrating Off Legacy Clinical Systems Without Triggering Reportable Breaches
When a hospital migrates to a new electronic health record platform, the headline project is the new system. The data conversion, the workflow redesign, the clinician training. The legacy EHR,…
Read article →Healthcare
Medical Imaging and Embedded PHI: Sanitization for MRI, CT, and Ultrasound Decommissioning
A diagnostic imaging modality is not an IT asset. It is a multi-million-dollar clinical system running a proprietary operating system, accessed through a vendor-controlled console, with internal storage saturated with…
Read article →Healthcare
Budgeting Healthcare ITAD: Cost Benchmarks and Line-Item Templates for IT and Finance
Healthcare IT leaders rarely fail to budget for laptops, servers, or imaging modalities. They consistently fail to budget for what happens to those assets at the end of life. Disposition…
Read article →Healthcare
Lost Laptop, Reportable Breach: How Mobile Workforce Hardware Became Healthcare’s Most Common OCR Citation
The most consistent fact pattern in HHS Office for Civil Rights enforcement records is not a sophisticated cyberattack. It is a laptop in a parked car, a tablet in checked…
Read article →Healthcare
Class II vs Class III Medical Device EOL: How FDA Classification Changes Your Disposal Process
A retiring infusion pump and a retiring linear accelerator are not the same disposal problem. Both qualify as medical devices under the Food and Drug Administration’s regulatory framework, but their…
Read article →ITAD
Crypto Erase vs Overwriting: Why NIST 800-88 Rev 2 Made Multi-Pass Obsolete
For two decades, multi-pass overwriting was the default sanitization method most disposal SOPs cited. The DoD 5220.22-M three-pass and seven-pass patterns appeared in vendor brochures, audit checklists, and procurement language…
Read article →Government
NSA EPL Equipment Guide: Approved Degaussers, Disintegrators, and Crushers for Classified Destruction
For classified storage media, equipment procurement is rule-bound. The National Security Agency maintains the Evaluated Products List (EPL) through its Center for Storage Device Sanitization Research (CSDSR), and any device…
Read article →