--- title: "ISO 27001: 2022 A.7.14 Secure disposal or re-use of equipment" description: "This article provides additional information on how you can meet the requirement for the ISO 27001: 2022 A.7.14 Secure disposal or re-use of equipment." --- [Skip to content](https://knowledge.adoptech.co.uk/iso-27001-2022-a.7.14-secure-disposal-or-re-use-of-equipment#main-content) [![Adoptech-logo-GreyWithoutStrapline-1.png\]](https://knowledge.adoptech.co.uk/hs-fs/hubfs/Adoptech-logo-GreyWithoutStrapline-1.png?height=39&name=Adoptech-logo-GreyWithoutStrapline-1.png)](https://knowledge.adoptech.co.uk/?hsLang=en) Open main navigation Close main navigation Adoptech Help Centre - There are no suggestions because the search field is empty. 1. [Knowledge base](https://knowledge.adoptech.co.uk/?hsLang=en) 2. [Frameworks & Certifications](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en) 3. [ISO 27001](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-27001) # ISO 27001: 2022 A.7.14 Secure disposal or re-use of equipment ## This article provides additional information on how you can meet the requirement for the ISO 27001: 2022 A.7.14 Secure disposal or re-use of equipment. ### **ISO 27001: 2022 Control Description** Items of equipment containing storage media shall be verified to en sure that any sensitive data and licensed software has been removed  or securely overwritten prior to disposal or re-use. ### Purpose To prevent the leakage of information from equipment that is being disposed of or reused. ### **Guidance on implementation** Follow these steps to ensure that sensitive data and licensed software are properly handled before disposing of or reusing equipment: 1. Check for Storage Media: Verify if the equipment contains any storage media before disposal or reuse. 2. Handle Confidential Information: If the storage media holds confidential or copyrighted information: - Physically destroy the media, or - Use methods to destroy, delete, or overwrite the information so that it is non-retrievable. Avoid simply using the standard delete function. For detailed guidance, refer to Control A.7.10 [Storage media](https://knowledge.adoptech.co.uk/iso-27001-2022-a7.10-storage-media?hsLang=en) and Control A.8.10 [Information deletion.](https://knowledge.adoptech.co.uk/A.8.10-information-deletion?hsLang=en) 3. Remove Labels and Markings: Before disposing of, reselling, or donating equipment, remove any labels or markings that identify the organisation or indicate the classification, owner, system, or network. 4. Consider Security Control Removal: Evaluate whether to remove security controls, such as access controls or surveillance equipment, at the end of a lease or when moving out of premises. This depends on: - The lease agreement, which may require returning the facility to its original condition, - The risk of leaving sensitive information on systems for the next tenant (e.g., user access lists, video or image files), - The potential for reusing the controls at the new location. ### Additional Information - Risk Assessment for Damaged Equipment: Conduct a risk assessment on damaged equipment with storage media to decide if it should be physically destroyed instead of repaired or discarded. - Encryption for Added Security: Besides secure disk deletion, full-disk encryption can help reduce the risk of disclosing confidential information when equipment is disposed of or redeployed, provided: - The encryption is strong and covers the entire disk, including slack space and swap files, - Cryptographic keys are long enough to withstand brute force attacks, - Cryptographic keys are kept confidential and not stored on the same disk. - Secure Overwriting Techniques: Techniques for securely overwriting storage media vary by technology and information classification level. Ensure that overwriting tools are suitable for the technology used in the storage media. . - [Getting Started](https://knowledge.adoptech.co.uk/getting-started?hsLang=en#main-content) - [Getting Started](https://knowledge.adoptech.co.uk/getting-started?hsLang=en#getting-started) - [Accounts & Billing](https://knowledge.adoptech.co.uk/getting-started?hsLang=en#accounts-billing) - [FAQ's on Adoptech](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#main-content) - [Frameworks](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#frameworks) - [Policies & Documents](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#policies-documents) - [Risk Management](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#risk-management) - [Supplier Management](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#supplier-management) - [Audit Preparation](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#audit-preparation) - [Trust Centre](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#trust-centre) - [User Management](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#user-management) - [Frameworks & Certifications](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#main-content) - [ISO 27001](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-27001) - [ISO 42001](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-42001) - [Cyber Essentials](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#cyber-essentials) - [CAF](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#caf) - [PCI-DSS](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#pci-dss) - [SOC2](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#soc2) - [Data Privacy (GDPR)](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#data-privacy-gdpr) - [DORA](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#dora) - [ISO 9001](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-9001) - [ISO 22301](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-22301) - [ISO 14001](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-14001) - [NIST 800-53](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#nist-800-53) - [NIST-CSF](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#nist-csf) - [NIS2](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#nis2) - [ISO 20000-1](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-20000-1) - [HIPAA](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#hipaa) - [Integrations](https://knowledge.adoptech.co.uk/integrations?hsLang=en#main-content) - [Cloud Infrastructure](https://knowledge.adoptech.co.uk/integrations?hsLang=en#cloud-infrastructure) - [Identity & Access](https://knowledge.adoptech.co.uk/integrations?hsLang=en#identity-access) - [DevOps & Code](https://knowledge.adoptech.co.uk/integrations?hsLang=en#devops-code) - [Project Management](https://knowledge.adoptech.co.uk/integrations?hsLang=en#project-management) - [HR & People Systems](https://knowledge.adoptech.co.uk/integrations?hsLang=en#hr-people-systems) - [Security & Devices](https://knowledge.adoptech.co.uk/integrations?hsLang=en#security-devices) - [Communication & Collaboration](https://knowledge.adoptech.co.uk/integrations?hsLang=en#communication-collaboration) - [Legal & Regulations](https://knowledge.adoptech.co.uk/legal-regulations?hsLang=en) - [Security Guidance](https://knowledge.adoptech.co.uk/security-guidance?hsLang=en) - [Troubleshooting](https://knowledge.adoptech.co.uk/troubleshooting?hsLang=en) [![Chill listening crop-3](https://knowledge.adoptech.co.uk/hs-fs/hubfs/adoptech-logo-1.png?width=209&height=54&name=adoptech-logo-1.png "Chill listening crop-3")](https://adoptech.co.uk/) Copyright © 2026, Adoptech Ltd.