Employee Programs

With an increasing uptick in hacks and data security breaches, information technology equipment management and data-bearing device security are becoming critical business components. Many companies are putting more emphasis on physical destruction of hard drives and data wiping. - Rod McDaniel, S3 CEO

Data and Privacy

From onsite data destruction to IT asset removal, S3 protects clients’ data and interests. S3 performs data sanitization and destruction on all data-bearing devices including but not limited to hard drives, removable flash memory, removable storage devices, and solid-state drives. All S3 processing and recycling activities satisfy the regulatory standards set forth by HIPAA, GLB, PCI and the California Security Breach Information Act in accordance with U.S. DoD 5220.22-M and NIST SP 800-88 R1 guidelines. And all material designated for recycling is done in a zero-landfill manner.

As a member of the National Association for Information Destruction (NAID), S3 sanitizes or completely destroys all media in accordance with NIST guidelines and provides each client with a certificate of destruction. Full transparency is an important part of S3’s service, so it produces detailed audit reports for clients for each device including: Asset ID, serial number, the security process that was performed, the name of the technician who performed it, and a real-time status report of where the device stands at any given time.

Training — S3 Recycling Solutions ensures that employees involved in the data wiping process receive appropriate training on a regular basis (at minimum, annually or as software or equipment change) and are evaluated for competency. Employees involved in the physical destruction process are evaluated for competency at minimum, annually, unless the method of destruction changes.

Security Controls — including physical security, monitoring, chain-of-custody, and personnel qualifications –are in place for all unwiped or undestroyed data storage devices.

Secure Facilities — When a data destruction project requires offsite processes, clients can be sure that S3’s multilevel security continues to protect their sensitive data. S3 provides a secure chain of custody during the relocation of clients’ data-containing devices, and its offsite facilities are monitored 24/7. On top of constant CCTV monitoring, facilities have armed guards on both shifts, RFID badge access to data-sensitive areas, third party monitoring, and security gates on dock doors.

Environmental, Health & Safety

S3 Recycling Solutions is committed to following the R2: 2013, ISO 45001:2018 and ISO 14001: 2015 requirements and to maintain conformance to the requirements of this EH&S management system and scope. S3 is equally committed to meet or exceed its customer requirements, to continually improve its processes and to maintain compliance with relevant environmental, Occupational Health and Safety and data security legislation and regulations. The goal of S3 Recycling Solutions’ operation is to have a positive impact on the environment through responsible recycling requirements that includes the conservation of metals, plastic and other non-renewable resources. Consistent with these core operations, it is S3 Recycling Solutions’ overall goal to accomplish its business objectives while meeting and exceeding the environmental and health & safety expectations of management, employees, customers, suppliers and regulators.

S3 will continually improve its systems while striving to minimize adverse impacts on the environment by managing and tracking through the recycling chain used and endof-life electronic equipment, components and materials, including focus materials as identified in the R2: 2013 Standard –with respect to both on-site activities and the selection of downstream vendors- using a “reuse, recover, dispose” hierarchy of responsible management strategies. To achieve the above stated objectives, S3 Recycling Solutions is committed to: • Ensuring that these policies are appropriate to S3’s operations, and its potential environmental impacts and health and safety risks of S3 Recycling

Solutions’ activities, products and services; • Fulfilling and complying with all relevant

EH&S legal requirements, compliance obligations, customer and product requirements, industry guidelines and any other EH&S commitments made by S3

Recycling Solutions; • Striving for continual improvement to enhance EH&S performance; • Providing safe and healthy working conditions for the prevention of workrelated injury and ill health; • Eliminating hazards and reducing risks • Providing the framework for setting & reviewing EH&S goals, which are established and are compatible with the strategic direction and the context of S3

Recycling Solutions; • Protecting the environment and preventing pollution; • Consultation and participation of workers, and workers’ representatives • Ensuring that this system and policies are communicated and understood by all persons working for or on behalf of S3

Recycling Solutions; • Making the EH&SMS policy available to the public and interested parties and; • Ensuring that this EH&S policy is reviewed and amended, as necessary and appropriate.