Summit Shredding prides itself on offering the highest standards available for destruction of sensitive material.
Summit Shredding follows guidelines set by the Information Security Oversight Office (ISOO) apart of the National Archives and Records Administration.
These processes are set to provide proper procedure for the destruction of Controlled Unclassified Information in paper form. The Director of the ISOO exercises Executive Agent responsibilities for the CUI programs. Title 32 CFR Part 2002, CUI establishes program requirements for designating, safeguarding, disseminating, marking, decontrolling and disposing of CUI.
The CUI regulation requires that agencies destroy CUI “in a manner that makes it unreadable, indecipherable, and irrecoverable” (32 CFR 2002.14(f)(2)). It also prescribes National Institute of Standards and Technology (NIST) Special Publication (SP) 800-88, Revision l: Guidelines for Media Sanitization (December 2014) (NIST SP 800-88, rev 1) destruction methods, or any destruction method approved for Classified National Security Information (32 CFR 2001.47), unless the CUI category's authority mandates other destruction methods (CUI Specified categories). Agencies must also use any destruction method specifically required by law, regulation, or Government-wide policy for CUI Specified categories.
Multi-Step Paper Destruction Standard.
Agencies must:
Ensure they secure CUI while awaiting destruction
Many agencies use a locked container to store CUI waiting to be shredded (commonly referred to as “shred bins”)
Determine whether material will be shredded on-site or at another location.
Material that an agency consolidates and collects or stores, or that it shreds to a degree not meeting the CUI destruction standard and then consolidates and collects or stores, at interim storage facilities (or by the subcontractors) must be protected within a controlled environment that prevents access by unauthorized individuals. Procedures must be in place to account for and track consolidated CUI until it is destroyed to the standards of the CUI Program
Establish the frequency of destruction or “pickup” to ensure large quantities of CUI are not being accumulated unnecessarily.
Verify and ensure the physical safeguarding measures for all stages of the destruction process, including as applicable: consolidation locations, pick-up, transportation to storage locations, any interim storage locations, transportation to interim or final shredding, recycling, or destruction sites, and storage at such sites while awaiting shredding, recycling, or destruction.
This requirement extends to any contractor or subcontractor facilities where consolidated CUI is stored prior to final destruction or recycling.
Limit the time between pick-up and final destruction.
Ensure that only authorized and vetted employees are given access to any interim storage locations.
Ensure that all material provided for destruction has been completely destroyed and has not been misplaced during any step in the process.
Ensure and verify that the end product is unreadable, indecipherable, and irrecoverable,
Establish a validation/inspection timeline and quality control process to ensure that destruction is occurring as expected and in compliance with all requirements.
Document any multi-step destruction methods used.