Blog - Land Shark Shredding

Earth Day Celebration Tips

On April 22^nd, millions of people around the globe will celebrate Earth Day. Are you planning any office eco-initiatives to mark the occasion? If not, don’t worry; we have you covered. Here we share three ways to inspire environmental appreciation in your business on Earth Day.

Organize a Purge Shredding Event

Americans discard over 4 million tons of office paper per year, and these discarded paper documents often contain personally identifiable information (PII) or protected health information (PHI).This is why it’s important to have a paper destruction solution that’s sustainable and secure. A purge shredding event is a great way to eliminate office clutter in a safe, environmentally-friendly manner.

Your document shredding provider can deliver locked collection containers to your office before Earth Day. Then, on April 22^nd, everyone can deposit outdated and no-longer-needed documents into the containers. They don’t even have to remove staples and paperclips from files. After you fill the containers, your shredding provider destroys and recycles your documents.

To make it fun, award prizes to departments that fill the most containers. Encourage your employees to dress casual for the purge since your expired documents may be covered in a layer of dust. And don’t forget to celebrate the event with snacks and beverages!

Perform an Energy Audit

Electronic office devices don’t just expand your electricity bill, they contribute to climate change. Everything from inefficient halogen bulbs to office shredders deplete global energy reserves. Replace outdated appliances and electronics with Energy Star rated devices. Swap out old light bulbs with energy-efficient LEDs. And say goodbye to your energy-hogging office shredding machine by investing in a scheduled shredding service.

Recycle Your eWaste

Roughly 3.42 tons of electronics waste or eWaste ends up in United States landfills every year. Earth Day is the perfect time to dispose of your electronics in an environmentally-friendly manner. Gather your old devices, including:

Printers
Fax machines
Computer towers and monitors
Scanners
Laptops

Your destruction service provider picks up your electronics for eWaste recycling. The data stored on the hard drives and disks of your electronic devices is destroyed first, then the raw materials in each device are recycled according to US EPA, Department of Natural Resources, e-Steward Initiative standards.

We hope these Earth Day tips inspire long-term commitment to environmental sustainability in your business!

Land Shark Shredding offers NAID AAA Certified shredding and destruction services in Bowling Green and throughout southwest Kentucky. For more information, please contact us by phone or complete the form on this page.

Your Media Destruction Questions, Answered

Every corporate information security plan needs a final disposition solution for expired hard drives and backup tapes. But understanding media destruction best practices isn’t always easy. In this blog, we answer several common media destruction questions.

Q: Am I required by law to destroy my electronic media?

A: Yes. The following federal regulations set strictguidelines for how media with confidential information must be destroyed:

The Health Insurance Portability and Accountability Act (HIPAA)
The Fair and Accurate Credit Transaction Act (FACTA)
The Gramm-Leach-Bliley Act (GLBA)

Failure to destroy your media as these regulations require may result in severe financial penalties and damage your business’ reputation.

Q: So, what media should I destroy?

A: Destroy any media storing sensitive personal, financial, or medical information. These may include the following portable storage devices:

CDs, DVDs, and Blu-rays
Credit cards, ID cards, and other magnetic or chip cards
Flash drives
Hard drives
Magnetic backup tapes
Memory cards
VHS tapes
Zip disks

Q: What does a media destruction service cost?

A: The volume of devices destroyed, frequency of service, and how quickly you need your media destroyed determines the cost of your media destruction service. A reputable provider will offer a free quote before starting your project.

Q: Can’t I erase and sell my old hard drives and backup tapes?

A: You can, but this will leave your information vulnerable to a data breach. A recent study by the National Association of Information Destruction (NAID) found that 40 percent of used electronic devices sold on the secondhand market contained personally identifiable information (PII). Deleted or wiped files can still be recovered, so always have your expired devices professionally destroyed.

Q: What happens to the eWaste from my shredded media?

A: Your media destruction provider should partner with a trusted, local electronics recycling company that disposes of your eWaste in an environmentally-sustainable way which follows US EPA, Department of Natural Resources, e-Steward Initiative, and local solid waste department standards.

Q: Why should I work with a NAID AAA Certified media destruction company?

A: Partnering with a NAID AAA Certified provider ensures you receive a secure and ethical data destruction solution. The NAID AAA Certification Program requires that providers meet their high standards in the following areas:

Operational security
Employee hiring and screening
Responsible information disposal
Liability insurance

When a NAID member has completed a successful audit, they receive a certificate showing their company name and the destruction service they’re certified to offer customers.

If you have more media destruction questions, please contact us by phone or complete the form on this page. We love answering your questions!

Inside an Electronic Media Destruction Service

Do you know that it’s possible for a tech-savvy data thief to recover information from hard drives, disks and other electronic media—even if the data on these devices has been manually deleted? Furthermore, a study conducted by the National Association of Information Destruction found 40 percent of devices resold in publicly-available resale channels contained personally identifiable information (PII). So, it goes without saying that having a secure destruction solution for your outdated media is a must!

But how does an electronic media destruction service work, and how can you be sure your data is protected when partnering with a data destruction partner? In this blog we take you inside an electronic media destruction service.

Secure Collection and Handling

Privacy protection should begin the moment your electronic media destruction provider arrives at your business. A uniformed shredding technician collects your devices for destruction. These individuals are highly trained and background screened. They undergo rigorous background checks and strict licensing requirements. Your media is collected and handled within a strict chain of custody to minimize identity theft and business fraud risks.

Mobile On-Site Shredding

After your media is collected, it’s immediately taken to a state-of-the-art mobile shredding truck parked on-site at your business. The truck is equipped with an advanced hard drive and media shredder which reduces your electronic and magnetic devices to tiny particles that are impossible to reconstruct. Shredding takes place in a matter of minutes while you watch. At the completion of your destruction project, you receive a Certificate of Destruction documenting the date and time of destruction.

eWaste Recycling

Roughly 3.42 tons of electronics waste, or “eWaste,” ends up in U.S. landfills every year, which has severe consequences for the health of our environment. That’s why you should partner with an electronic media destruction service that offers sustainable recycling of your eWaste. After your devices are destroyed, the shredded waste is recycled using an environmentally-friendly process.

Now that you know what to expect from an electronic media destruction service, make sure your provider offers the critical and value-added services we’ve shared here.

How to Avoid Phishing Scams

Phishing is a fraudulent practice cybercriminals use to compromise computers and steal sensitive information from individuals by pretending to be an email from—or the website of—a trusted organization. Recently, phishing scams have become increasingly sophisticated and varied, targeting organizations of all sizes. In this blog, we offer several tips for protecting your company from phishing scams.

Educate Your Employees

Cybercriminals exploit the vulnerabilities of employees. Therefore, educating your staff about phishing threats is critical. Your employees should always question whether they should open an attachment or click on a link to a site. Teach them to confirm that the link they are about to click on will send them to a legitimate, secure site. The validity of websites should always be reviewed. Check the spelling of website URLs and links, and make sure the link fits with the content of the email. If your employees receive questionable emails or attachments, they should delete them or forward them to your IT department for investigation. Remember, educating your employees is more than providing one training session; make ongoing education part of your phishing prevention plan.

Keep Your Systems Current

Many phishing scams involve impersonating trusted websites. If you don’t check the URL of a website before logging in, you may unknowingly hand over sensitive information to an attacker. Make sure every computer on your corporate network uses the HTTPS Everywhere extension to verify correct URLs. Install the latest patches and updates on all company devices to protect against software vulnerabilities and security issues.

Use a VPN

A virtual private network (VPN) encrypts your data while it is being transmitted. A VPN renders your local IP address anonymous, making it harder for a phishing attacker to steal your login credentials. A VPN can significantly boost online security for your business.

Use Anti-Spam Software

Spam filters can reduce the number of potential email phishing attacks, but they require constant tweaking and updating. Anti-spam software automatically reduces the volume of corporate spam and provides real-time protection from phishing threats. Any number of anti-spam software providers can provide a solution for your business.

Update Password Policies

Using one password for every login is a big mistake. Everyone in your organization should be using a unique password for each application and website. Long, complex phrases with letters, characters and numbers are more secure than words. Require your employees to use two-factor authentication to fortify their logins. That way, a code is sent to an employee’s phone to verify their login attempt.

Phishing threats may be frighteningly common, but by following these tips, you can help protect your organization from a security breach.

5 Paper Shredding Mistakes to Avoid

In today’s high-tech world, the number of data breaches keeps rising. No business is safe, so every business needs a complete information security plan. Yet, many business owners focus on digital risks while ignoring paper-based vulnerabilities. Document destruction mistakes can be just as disastrous as cyberattacks and viruses. Here are five paper shredding mistakes to avoid:

Mistake 1: Not Having a Document Shredding Policy

Do your employees know what to do with outdated documents and expired hard copy records? Is there a formal document destruction policy in your organization? Without clearly-defined document destruction standards, your company is vulnerable to identity theft, business fraud, and increased liability exposure. Implement a document shredding policy for everyone to follow.

Mistake 2: Holding On to Documents Too Long

Many organizations make the mistake of hoarding outdated documents. But keeping paper records beyond their required retention period can create legal risks for your company. When documents reach their final disposition date, destroy them.

Mistake 3: Shredding with an Office Shredder

Using an office shredder seems like a good idea at first, but if you’ve used one for a while, you know how problematic these machines can be. Paper shredders are prone to overheating, paper jams, and other maintenance issues. When your paper shredder is inoperable, you can’t destroy documents. Plus, documents shredded with an office shredder can be easily reconstructed.

A professional paper shredding service offers a much more secure and efficient way to destroy your documents. Outsourced shredding eliminates this time-intensive process. Your shredding company provides secure locked collection containers. Whole files with staples and paperclips can be deposited into the collection containers in a matter of seconds, and your documents are destroyed with the most advanced shredding technology available.

Mistake 4: Practicing Negligent Paper Recycling Habits

We all want a healthy planet, but that doesn’t mean tossing confidential documents in a recycling bin is a good idea. Thieves scour recycling bins looking for carelessly discarded documents with sensitive information. Fortunately, with a secure, environmentally-responsible shredding service, your documents are destroyed and sent to a recycling partner for secure recycling. It’s a two-for-one solution that protects your privacy and protects our planet!

Mistake 5: Not Using a NAID AAA Certified Shredding Provider

There are many companies that can shred your documents, but not all of them are NAID AAA Certified. The National Association for Information Destruction(NAID) is the international, non-profit trade association for companies providing information destruction services. NAID’s mission is to educate businesses, industry, and government entities about the importance of destroying discarded information, promote the value of contract destruction services, and to promote the standards and ethics of its member companies.

NAID AAA Certified member companies must maintain a minimum amount of general liability insurance (umbrella or aggregate) of $2,000,000. They are also audited regularly to verify their ongoing compliance with NAID standards. Choosing a NAID AAA Certified shredding and destruction provider ensures unparalleled privacy protection for your information.

If you want to protect your information, don’t make these paper shredding mistakes.

Beyond Paper: What Else Does Your Shredding Provider Offer?

Shredding outdated paper records is essential for maintaining the privacy of your customers, protecting your business reputation, and complying with state and federal regulations. But document shredding isn’t the only step you need to take. For a comprehensive privacy protection solution, see if your shredding provider offers the following services:

Media Destruction

Every privacy protection plan should include a final disposition solution for expired and unwanted computer media. Partner with a shredding and destruction company who offers a turnkey disposal solution for the following electronic/magnetic media devices:

Hard drives
Flash drives
Zip disks
Magnetic backup tapes
CDs, Blu-rays, and DVDs
Credit cards and other magnetic-stripe cards
VHS and cassette tapes
Floppy disks
Optical disk drives

Product Destruction

If you’re a manufacturer, wholesaler, or retailer and thieves scavenge discarded products from your dumpster, your brand may suffer permanent damage. Check to see whether your shredding provider offers product destruction services that allow you to securely dispose of defective merchandise, sensitive products, prototypes, and other products regulated by law.

eWaste Recycling

Every year, millions of tons of corporate electronic waste are dumped in landfills. To help protect the planet, partner with a shredding and destruction provider that offers eWaste Recycling services. They pick up your electronic waste and transfer it to trusted recycler for environmentally-responsible recycling or disposal.

Policy and Procedure Consulting

There are laws and regulations your company must adhere to when managing, retaining and disposing of sensitive documents. A shredding and destruction partner offering policy and procedure consulting helps your organization set up guidelines and standards for information retention and final disposition.

Identity Theft Training

Identity thieves prey on companies with sensitive personal, financial, and medical data. Since your employees are the first line of defense against identity theft, educate them on how to protect confidential information. A shredding and destruction company that offers identity theft training ensures your staff has a thorough understanding of identity theft risks and prevention strategies.

HIPAA Compliance Training

The Health Insurance Portability and Accountability Act (HIPAA) affects any organization storing, handling, and/or transmitting protected health information (PHI). HIPAA compliance is monitored and enforced by the Department of Health and Human Services’ Office of Civil Rights (OCR). HIPAA non-compliance penalties include monetary fines and possible jail time for corporate officers. Partnering with a shredding and destruction company that offers HIPAA physician compliance training ensures your information disposal policies practices comply with the law.

The Laws Affecting Your Information Destruction Practices

Every business should destroy expired documents and data, but in many industries, information disposal is the law. Non-compliance can damage your bottom line and ruin your business reputation. Here’s an overview of several federal regulations that may affect your business:

The Fair and Accurate Credit Transactions Act (FACTA)

FACTA, one of America’s oldest privacy laws, was established in 1970 to protect consumers from identity theft. Financial institutions and creditors are required to create and implement a written Identity Theft Prevention Program to help detect and prevent identity theft. FACTA’s Disposal Rule requires businesses to take “reasonable measures to protect against unauthorized access to or use of consumer information,” including during disposal.

Family Educational Rights and Privacy Act (FERPA)

Enacted in 1972, FERPA prevents educational institutions from distributing student records to anyone other than parents or approved organizations without written permission. If student information is breached, an organization held responsible can be subject to a withholding of federal funds and payments. As a result, educational institutions must dispose of student records in a secure and verifiable manner.

Gramm-Leach-Bliley Act (GLBA)

Like FACTA, GLBA requires financial institutions to develop and maintain a written information security plan for protecting consumer information. GLBA requirements include:

Designation of at least one employee to manage safeguards
Risk analysis plans for each department handling personal information
Developing, testing and monitoring an information security program
Changing safeguards as needed

To meet these requirements, your business should have a clear and concise plan for how records are stored, controlled, accessed and destroyed.

The Health Insurance Portability and Accountability Act (HIPAA)

HIPAA was enacted in 1996, establishing rules for protecting patient privacy. The law affects any organization storing, handling, and/or transmitting protected health information (PHI). HIPAA compliance is monitored and enforced by the Department of Health and Human Services’ Office of Civil Rights (OCR).

Hospitals, pharmacies, primary care providers, medical clinics are considered HIPAA “covered entities.” Organizations providing services to covered entities are considered “business associates.” Both must comply with HIPAA’s Privacy Rule and Security Rule by implementing physical, administrative and technical safeguards for PHI. Penalties for lack of compliance, including improper disposal of PHI, may result in monetary fines and possible jail time for corporate officers.

One of the best ways to meet the requirements of these privacy laws is to partner with a company offering NAID AAA Certified shredding and destruction and employee compliance training services.

6 Tips for Identity Theft Prevention and Awareness Month

For many Americans, December is the most festive time of year—full of generosity, celebration and good cheer. It’s also prime time for identity theft, which is why December is Identity Theft Prevention and Awareness Month. In this blog, we offer several tips to help you keep identity theft scrooges at bay.

1. Think Before You Swipe

Identity thieves have a deep bag of tricks, and “skimmers” are one of them. Gas station credit card readers and stand-alone ATMs are sometimes compromised with skimmers. Attached to gas pump payment terminals and stand-alone ATMs, these devices are designed to steal data from your credit card’s magnetic strip when you swipe. Skimmers are very hard to spot, as thieves design them to look and feel legitimate. When buying gas, consider paying inside instead of at the pump. And withdrawing cash at your bank’s drive-up window is safer than using an ATM, so try to plan ahead.

2. Stay on Top of Your Mail

December is the prime month for mailing gifts and receiving home deliveries, which means it’s also open season for mail theft. Delivered packages can sit for hours or days on front porches and mailboxes are often stuffed with outgoing letters, cards, and bill payments.

Know your mail delivery schedule and track incoming package deliveries so you can promptly retrieve your packages. If you won’t be at home, instruct your delivery provider to leave packages on the back porch or with a neighbor. Don’t leave greeting cards with checks in your mailbox for your carrier to retrieve. Drop them off at your local post office instead. When possible, avoid putting bill payments in the mail to begin with. Instead, pay your bills online. Most service providers have secure electronic payment systems; sign up for them.

3. Make Online Purchases at Home

One of conveniences we enjoy is being able to buy something online—anytime, from anywhere. But this convenience comes at a cost. Free, public WiFi hotspots are often unencrypted, which makes it easy for a criminal to steal your credit card data while you’re making online purchases. Wait until you get home to buy your holiday gifts from your secure home network. Otherwise, only connect to a free, public Wi-Fi hotspot if you have a virtual private network (VPN) installed on your device.

4. Keep a Close Eye on Your Devices

Identity thieves don’t only lurk online. Stay aware of your surroundings when at crowded airports and malls during the holiday season. Pickpockets capitalize on distracted shoppers and travelers. Store your wallet, smart phone, laptop and passport securely in your pocket or bag.

5. Watch Your Credit Activity

You should monitor your credit activity year-round, but especially in December. The more you swipe, the more your data is at risk of being stolen. You’re entitled to one free credit report every year from each of the three major credit reporting bureaus. If you haven’t requested one this year, act now.

6. Shred Your Documents

Every receipt, bank statement, and shipping label with your name and address that lands in the trash increases your chances of becoming a victim of identity theft. Shred any piece of mail that has sensitive personal or financial information on it.

Wishing you and your family a safe and secure holiday!

In-House Shredding vs. Outsourced Shredding

Document shredding is commonplace in most businesses. Who destroys your documents? Do you shred everything in house or do you outsource your shredding? In this blog, we compare both options to help you make an informed decision about how to protect your confidential information.

Efficiency

In-house shredding programs put the responsibility of shredding on employees, who have to push aside core, revenue-generating tasks to shred documents. Destroying a file with an office shredder takes several minutes. Staples and paperclips must be removed so the shredder doesn’t jam. Large files must be separated into small, easy-to-shred portions. And the shredding receptacle must be emptied frequently.
Outsourced shredding eliminates this time-intensive process. Your shredding company provides secure locked collection containers. Whole files with staples and paperclips can be deposited into the collection containers in a matter of seconds. Your documents are securely stowed until your shredding company picks them up for destruction. If you want to maximize your company’s productivity and profits, outsourced shredding is the clear choice.

Security

Inefficient in-house shredding processes compromise the privacy of your information. Busy employees with multiple responsibilities are less likely to shred sensitive documents in a timely manner, and every sheet of paper that goes into the trash can or recycling bin is a potential source of liability for your business.
Outsourced shredding minimizes document disposal risks and errors. Your collection containers are locked and emptied under the close supervision of a professional shredding technician. Certified, insured professionals wearing photo IDs follow strict chain of custody protocols while collecting and destroying your information. Your confidential documents are destroyed right on your premises with state-of-the art mobile shredding trucks.

Cost

In-house shredding expenses add up. Office shredders must be purchased and often need to be repaired. As with any electrical device, their use increases your energy consumption costs. But most importantly, every minute your employees spend shredding means one less minute for revenue-generating activities. Shredding cost per hour drops dramatically when you stop paying your employees to shred and let the professionals handle it instead.

Compliance

Complying with state and federal privacy regulations is a must. HIPAA, FACTA, and GLBA require organizations to have written and verifiable information destruction procedures.
Outsourced shredding offers better regulatory compliance than in-house shredding. A Certificate of Destruction is issued each time your documents are shredded. It notes the time, date and method of destruction, verifying your business’ compliance with state and federal privacy laws.
Land Shark Shredding offers NAID AAA Certified shredding and destruction services in Bowling Green and throughout southwest Kentucky. For more information, please contact us by phone or complete the form on this page.

7 Questions to Ask a Shredding and Destruction Provider

Today, identity theft and business fraud crime rates are at an all-time high. That’s why it’s important to partner with a shredding and destruction provider who takes the security of your information seriously. Before hiring a shredding and destruction provider, ask these seven important questions:

1. Are you NAID AAA Certified?

The National Association for Information Destruction (NAID) is the international, non-profit trade association for companies providing information destruction services. NAID’s mission is to educate businesses, industry and government entities about the importance of destroying discarded information, promote the value of contract destruction services, and to promote the standards and ethics of its member companies.

To earn AAA Certification, a shredding and destruction provider must be audited by an independent Certified Protection Professional® (CPP) who is accredited by the American Society for Industrial Security (ASIS) International. The following areas are assessed during a AAA Certification audit:

Operational and facility security
Information destruction processes
Employee hiring practices

2. How are my documents destroyed?

Before choosing a shredding and destruction provider, ask about their document destruction processes. For recurring scheduled shredding service, security containers should be strategically placed throughout your facility, allowing sensitive documents to be discarded fast and securely. For one-time purges, you should have the option of having security containers delivered in advance.

The contents of the containers should be collected by a trained professional for on-site shredding at your facility. After your shredding project is completed, you should receive a Certificate of Destruction for your compliance records.

3. Do you destroy media? If so, what kind?

Every privacy protection plan should include a final disposition solution for expired and unwanted computer media. Partner with a shredding and destruction company who offers a turnkey solution for both your paper records and electronic/magnetic media, including:

Hard drives
Flash drives
Zip disks
Magnetic backup tapes
CDs, Blu-rays, and DVDs
Credit cards and other magnetic-stripe cards
VHS and cassette tapes
Floppy disks
Optical disk drives

4. Do you destroy other items besides documents and media?

If your company produces merchandise, prototypes, or other branded, proprietary, or legally-regulated products, make sure they’re responsibly destroyed. A shredding and destruction partner who offers product destruction ensures your intellectual property and trade secrets are securely destroyed so your company stays compliant with laws and regulations.

5. What is your employee screening process?

Only certified, insured, uniformed and badged professionals should collect and destroy your confidential information. Make sure your shredding and destruction provider conducts rigorous background checks on its employees so you know only the most qualified people have access to your company’s sensitive information.

6. Do you offer on-site or off-site shredding?

Many shredding and destruction companies transport your documents and data offsite for destruction. But on the way from your business to the shredding facility, anything can happen to your information.

On-site shredding eliminates potential theft and unauthorized access to your documents and data. Choose a shredding and destruction partner who destroys your information on-site at your facility with mobile destruction trucks equipped with video verification systems.

7. Is my paper and e-waste recycled?

Besides safeguarding your information, a shredding and destruction service should incorporate green recycling practices. Make sure your shredding and destruction provider partners with a local recycling company who recycles your paper and disposes of your e-waste in an environmentally-friendly manner.

Remember to ask these seven essential questions when choosing a shredding and destruction provider for your business.

Navigation

Organize a Purge Shredding Event

Perform an Energy Audit

Recycle Your eWaste

Q: Am I required by law to destroy my electronic media?

Q: So, what media should I destroy?

Q: What does a media destruction service cost?

Q: Can’t I erase and sell my old hard drives and backup tapes?

Q: What happens to the eWaste from my shredded media?

Q: Why should I work with a NAID AAA Certified media destruction company?

Secure Collection and Handling

Mobile On-Site Shredding

eWaste Recycling

Educate Your Employees

Keep Your Systems Current

Use a VPN

Use Anti-Spam Software

Update Password Policies

Mistake 1: Not Having a Document Shredding Policy

Mistake 2: Holding On to Documents Too Long

Mistake 3: Shredding with an Office Shredder

Mistake 4: Practicing Negligent Paper Recycling Habits

Mistake 5: Not Using a NAID AAA Certified Shredding Provider

Media Destruction

Product Destruction

eWaste Recycling

Policy and Procedure Consulting

Identity Theft Training

HIPAA Compliance Training

The Fair and Accurate Credit Transactions Act (FACTA)

Family Educational Rights and Privacy Act (FERPA)

Gramm-Leach-Bliley Act (GLBA)

The Health Insurance Portability and Accountability Act (HIPAA)

1. Think Before You Swipe

2. Stay on Top of Your Mail

3. Make Online Purchases at Home

4. Keep a Close Eye on Your Devices

5. Watch Your Credit Activity

6. Shred Your Documents

Efficiency

Security

Cost

Compliance

1. Are you NAID AAA Certified?

2. How are my documents destroyed?

3. Do you destroy media? If so, what kind?

4. Do you destroy other items besides documents and media?

5. What is your employee screening process?

6. Do you offer on-site or off-site shredding?

7. Is my paper and e-waste recycled?

Quick Contact Info

Social Media

Pay Your Bill

Certifications