Asset Management

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or

Already have an account? Sign In »

Time
2 hours 19 minutes
Difficulty
Beginner
CEU/CPE
3
Video Transcription
00:00
Welcome back to student data privacy fundamentals.
00:03
This lesson is on asset management.
00:06
In this video, you will learn best practices for general asset Management,
00:11
tips for inventorying assets,
00:14
guidelines for disposal of assets, how to salvage assets
00:19
process, tips for donation or sale of assets
00:22
and tips for proper disposal of assets.
00:26
Data security must be maintained through the life of an asset, including the destruction of data and disposal of assets. Any computer, laptop, mobile device, printing and or scanning device, network appliance or equipment, A V equipment server, internal or external storage
00:47
communication device
00:48
or any other current or future Elektronik or technological device may be referred to as a system asset or device.
00:58
Note. Here again, you hear that phrase current or future device. Make sure that you use this phrase so that you're not stating specific types and models of devices and having to update your policy constantly as technology changes.
01:14
All involved systems and information are assets of the district and are expected to be protected from misuse, unauthorised manipulation and destruction.
01:25
All devices or systems considered an asset are inventoried by the technology department.
01:30
Here. You'll want to state what amount, for example, an asset costing over $100.
01:37
This includes but is not limited to network appliances, servers, computers, laptops, mobile devices and external hard drives.
01:46
You'll also want to state how often you will inventory. For example,
01:51
the technology department will conduct at a minimum an annual inventory verification of all staff devices and at least an annual inventory verification of student devices.
02:02
It is the responsibility of the technology department to update the inventory system to reflect any in school transfers in district transfers or other location changes for district technology assets.
02:16
Quiz Time Here is an open ended question to consider what price point and asset management is best for your organization.
02:25
Pause the video and consider what assets to inventory, what the price cut off will be and how often you will complete an inventory.
02:38
Assets shall be considered for disposal in accordance to state and federal regulations as well as board policy.
02:45
The following considerations are used when assessing an asset for disposal.
02:50
End of useful life,
02:52
lack of continued need
02:54
obsolescence
02:55
where damage or deterioration and excessive cost of maintenance or repair.
03:02
The director of technology shall approve disposals of any district technology, asset
03:07
documentation of the asset disposal when will include the asset tag number, description, serial number and method of disposal.
03:17
Once equipment has been designated and approved for disposal, it shall be handled according to one of the following methods. Salvage, donation or sale or disposal.
03:29
It is the responsibility of the Technology Department TOE Update the inventory system to reflect the disposal of the asset.
03:36
All technology assets shall be salvaged in a manner consistent with applicable environmental regulations.
03:43
Elektronik equipment may contain hazardous materials such as mercury lead and hexavalent chromium. In addition, systems may contain P II. Confidential or internal information
03:57
systems shall be wiped clean of this information. Prior to leaving the school district,
04:03
a district approved vendor shall be contract ID For the disposal of all technological system equipment,
04:10
the vendor shall provide written documentation verifying the method used for disposal and a certificate stating that no data of any kind can be retrieved from the hard drive or any other component capable of storing data.
04:24
Under no circumstances should any technological systems or equipment be placed in the trash
04:31
in the event that the district determines that an asset shall be dealt, donated or sold, an MOU or memorandums of understanding must be approved by the board.
04:43
Since systems may contain P II. Confidential or internal information system shall be wiped clean of this information prior to leaving the school district.
04:53
In addition, software licenses are not transferred outside the district. Therefore, systems must be returned to factory installation. Prior to donation,
05:04
the district will maintain a process for physical asset disposal in accordance to school board policy.
05:11
The district will ensure that all assets containing P II confidential or internal information are disposed of in a manner that ensures that this information is fully destroyed.
05:23
Quiz Time. What does your asset disposal process look like? Do you use a contractor for asset disposal? If so, what do you do to ensure security protocols for asset disposal with that contractor? Pause the video and think through these questions.
05:39
Then be sure to address them in the asset management section of your own policy.
05:47
In today's video, we discussed best practices for general management of all assets and what constitutes an asset.
05:56
Tips for inventorying assets of a certain price and how often to inventory
06:01
guidelines for disposal of assets, including one to dispose of an asset and what requirements to follow and documentation in that process.
06:10
How to salvage assets to protect sensitive data and avoid hazardous waste materials.
06:15
Process tips for donation or sale of assets, including MOU, and return to factory settings
06:21
and tips for proper disposal of assets, including complete removal of data.
06:27
In the next lesson, we will dive into learning how to protect against external threats. See you soon.
Up Next