ICT End-of-Life Self-Audit

Who typically manages ICT end-of-life in your organisation? *

IT team handles everything Procurement or Finance team Facilities / Operations Shared across multiple teams (not clear owner) Fully outsourced to vendor(s)

Do you have a documented ICT end-of-life policy or procedure? *

Yes, documented and current (reviewed in last 2 years) Yes, but outdated or not reviewed recently Informal process (not documented) No formal process

Do you maintain an asset register for ICT equipment? *

Yes, comprehensive (serial numbers, locations, assigned users, etc.) Yes, but basic (limited details) Partial (some assets tracked, others not) No formal asset register

Can you quickly identify which devices are ready for retirement? *

Yes, automated reports/alerts Yes, through manual review Difficult, requires significant effort No, we don't have this visibility

How do you handle data destruction on retired devices? *

Certified vendor (NIST, DoD, or equivalent standards) Internal process using software wiping tools Physical destruction only (shredding, drilling) Inconsistent – varies by device or person None / Unsure

Do you receive certificates of data destruction for every device? *

Yes, for all devices Only for certain devices (e.g., high-value or sensitive) Bulk certificate (not per-device) No certificates received

Has your ICT disposal process been audited in the last 3 years? *

Yes, and we passed with no major issues Yes, but there were findings/recommendations No, not audited Not sure

If audited tomorrow, could you produce a complete chain-of-custody report for retired devices? *

Yes, immediately (within 24 hours) Yes, but it would take significant effort Partially – we have some records but not complete No, we don't have this documentation

What percentage of your retired ICT equipment is diverted from landfill? *

>95% (near zero-landfill) 75–95% 50–74% Under 50% Not sure / Not tracked

Do you receive environmental impact reports from your disposal vendor(s)? *

Yes, detailed reports (CO₂ avoided, materials recycled, etc.) Yes, basic reports No, but we've requested them No

How many vendors do you currently use for ICT disposal? *

One primary vendor 2–3 vendors 4+ vendors None (handled internally or ad-hoc)

Do you have a formal SLA with your disposal vendor(s)? *

Yes, with clear response times and penalties Yes, but loosely defined or not enforced No formal SLA

What are your top 3 priorities for improving ICT end-of-life? *

Select up to 3 options

Better data security and compliance Cost reduction and budget control Sustainability and ESG reporting Audit readiness and documentation Simplification (fewer vendors, less admin) Faster response and turnaround times Better visibility and reporting

1 About Your Organisation

2 Current End-of-Life Process

3 Asset Records & Tracking

4 Data Security & Destruction

5 Compliance, Audits & Reporting

6 Sustainability & Environmental Impact

7 Vendor Management & Costs

8 Your Priorities & Next Steps

Additional Comments or Questions (Optional)

You're Ready to Submit!