The decommissioning of a data center is a large and often very time-consuming project, with many moving parts and lots of legal responsibilities for businesses to remain mindful of. At Procurri, we work to the highest of global and industry standards to decommission hardware safely, effectively and as sustainably as possible – often even managing to derive residual value from the now defunct assets. Taking such a comprehensive approach to decommissioning and to ITAD (IT Asset Disposition) is extremely involved but ensures the best possible results for all involved parties. So just how do we do it? Read on to learn more!
What is the Decommissioning of a Data Center?
The process of decommissioning a data center is the dismantling and removal of IT infrastructure hardware from a data center that is no longer in operation. In most cases, the data held within will have been migrated to newer hardware in a different location. Decommissioning a data center includes the removal and then asset disposition of servers, storage devices, networking equipment, cabling systems, power distribution units, cooling systems and any other components present.
Decommissioning Data Centers: The Procurri Process
Procurri approaches every data center decommission as a bespoke project, but applies the same seven process principles where appropriate to offer a streamlined service. These are:
Asset tagging
All hardware assets are identified and tagged systematically at the client’s data center site. This is for auditing purposes, to ensure that all assets are accounted for and tracked throughout all stages of the process.
Transporting
Once all assets have been safely turned off and data transferred to new hardware as required, Procurri uses professional IT movers who are fully security vetted in locked vehicles to transport all assets to secure ITAD facilities. Drivers do not leave their vehicles for enhanced security.
Receiving inventory logged
Once the assets are successfully transported to a secure ITAD facility, all inventory is scanned, logged and loaded onto an internal inventory management system. This provides further transparency as to the status and performance of each piece of hardware using their logging details from the initial asset tagging process.
Data sanitization
At this point, the data is thoroughly sanitized from the hardware using the most appropriate method dependent on the hardware itself. No matter the method used, once the data has been entirely and completely removed from an asset, it is individually tested and certified by an independent specialist engineer. The documented test results of data retrieval post-sanitization is immediately sent to the client.
Hardware testing
Only after all data is certified as being removed is the actual performance of the hardware tested. Stringent diagnostic tests are undergone to determine the condition of the hardware. Any assets considered to be in good working condition are then further tested and verified by specialist reuse engineers.
Inventorize
Any functional machines are disassembled at the component level, to separate out HDD, storage etc. These parts are then stored in a secured warehouse and inventoried on the inventory management platform.
Stored equipment can later be reassembled, configured and delivered for clients’ use, or, if they elect to derive monetary value from their assets, refurbished and packed with industry-standard materials before being remarketed and resold.
E-Waste Management
Finally, any assets that are faulty should be thoroughly retired. At Procurri, we operate as a Carbon Neutral business and so only work with zero-to-landfill ITAD providers for e-waste. Any assets needing to be destroyed are therefore passed on to certified e-waste recycling partners for responsible disposal; enhancing the clients sustainability bottom line further.
Decommissioning Data Centers: Data Erasure Standards
A critical responsibility of those decommissioning data centers and IT hardware is to stringently ensure that all data stored within it is wholly and completely removed. This is just not an ethical obligation to those whose information is present, but a legal, reputational and financial responsibility.
Procurri’s data destruction services include a whole suite of options, each chosen on its merits for the hardware type and data type at hand. This includes:
- Data sanitization
- Physical shredding
- Physical crushing and bending
- Degaussing
- Certified tape media erasure.
What’s more, Procurri ensures that all data removal is carried out not just in line with the local legal standards but also the industry best practice standards around the globe – including NIST, DoD, NAID AAA and HMG Infosec 5.
With all hardware later being thoroughly tested by independent data experts and every asset certified, clients can be reassured that no data at all remains and the decommission is even secure enough for remarketing and reuse by other parties.
The Blancco Method for Data Erasure
Procurri utilizes the Blancco method for data erasure on hardware being decommissioned. A patented approach to sanitize Solid State Drives (No. 9286231), it provides a secure data wipe of both HDD, SSD and other media, using NIST compliant algorithms. A digital certificate is provided as proof of the data wipe and sanitization for auditing purposes. The Blancco method meets all international standards and legal responsibilities, ensuring global adherence to the appropriate governance no matter where the business is based.
With certified tape media erasure, every tape is chipped and scanned prior to it entering the erasure process. This provides a full establishment of the life cycle and condition of the tape, including details such as how many times it have been drive mounted and the amount of data it holds. This is completed by running every metre of tape through a specially-designed, ultra-precision engineered, non-wearing magnetic head that removes all traces of readable data while leaving the servo tracks intact.
Every Procurri facility worldwide follows the Blancco process as well as integrating security measures including:
- Separately quarantined caged areas for any data-bearing hardware
- Comprehensive CCTV coverage across all facilities
- Restricted access to Procurri personnel who have undergone full background checks
- High-tech intruder alarm systems.
Data erasure services can be completed on-site at a client’s site, if desired, or the hardware transported by secure vehicles to a dedicated Procurri facility. These vehicles are subject to rigorous security measures, including:
- Dedicated, unmarked, hard side vehicles
- Real-time GPS tracking
- Security tags and locks
- Either non-stop or escorted journeys with secure staff.
Following the Blancco methodology, businesses are also provided with the results of full audits, serial number checks, erasure certification and sustainability reporting.
Decommissioning Data Centers: Sustainability Reporting
Procurri is a Carbon Neutral Organization, certified as such by the Carbon Footprint Standard. Such a sustainability and environmental focus is rarely for the case for ITAD providers, but at Procurri, we do things differently.
Working with a Carbon Neutral provider as opposed to one who doesn’t focus on sustainability helps demonstrate business’ commitment toward ESG goals, but furthermore, we can provide full sustainability reports including metrics on the benefits of the ITAD methods used. This includes the benefits of re-purposing hardware rather than disposing of it and measurements around the avoidance of disposal of hazardous raw materials. This reporting and the metrics included can be used in the business’ ESG annual reports, for the benefit of all stakeholders.
Decommissioning Data Centers: What happens next?
When a data center has been fully decommissioned, the business may continue with their IT operations using their new hardware and/or new location/s. However, there are some measures that must be taken to ensure all legal and security obligations are met. These include:
- Keeping thorough documentation – full detailed records of the decommissioning process that has been undergone, as well as the disposal and data erasure records for every piece of hardware. Keeping such records ensures that the business meets its ongoing data responsibilities and demonstrates their dedication to security
- Managing and optimizing physical data center space – where a business is maintaining the physical space left behind by the hardware that has been removed, it is up to them to optimize this space and use it for the best possible purposes
- Analyzing cost savings – where operational costs have been reduced by the decommissioned infrastructure, this should be documented. Furthermore, any residual value then derived from old hardware can be traced through the resale of hardware (where appropriate).
Decommissioning Data Centers: Work with the experts
At Procurri, we operate across 200+ countries and territories and a wide variety of hardware that’s mixed in its rarity, legacy status and complexity in configurations. No matter how nuanced your setup, Procurri has the specialist technicians in-house to navigate it and can ensure your data center decommissioning is as secure, yet sustainable, as possible.
Get in touch today to learn more and allow us to take the stress out of your project with end-to-end decommissioning management.