679
submitted 2 years ago* (last edited 2 years ago) by Krafting@lemmy.world to c/selfhosted@lemmy.world

6 servers were decomissioned, Iwas able to only get the disks, RAM, CPUs and Network Card.

The total of this is : 88 x 8TB SAS disks 44 x 16GB RAM sticks (half 2133, half 2400) 6 x v3 Xeon e3 2630 6 x v4 Xeon e5 2640 3 x 10 GB PCIe dual port cards 12 x 1U heatsink

I'm really lucky to have all of these, even if I don't have a use for all of that for now (except some of the disks)

EDIT: Forgot to mention: All of this for free, I work in a datacenter!

you are viewing a single comment's thread
view the rest of the comments

Somewhere, an ISO27001 auditor’s jimmies started rustling.

[-] brbposting@sh.itjust.works 6 points 2 years ago

Do you think it’s possible for old decommissioned drives to be donated in a compliant manner?

Reference for others:

ISO/IEC 27001 is an international standard to manage information security. … It details requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS) – the aim of which is to help organizations make the information assets they hold more secure. Organizations that meet the standard's requirements can choose to be certified by an accredited certification body following successful completion of an audit.

[-] stevestevesteve@lemmy.world 14 points 2 years ago

It certainly is. ISO 27001 is a framework, not very prescriptive at all. Basically an auditor will ask "how do you ensure data isn't leaving your facility in the form of discarded hardware?" If you say "here's a link to our media destruction policy. It says all drives are wiped according to NIST 800-88 cryptographic erasure. If that is not possible or not applicable, the drive is destroyed. Here's our log of decomissioned equipment" chances are very good they'll say "OK great let's move on to the next one" with only minor followup questions.

[-] brbposting@sh.itjust.works 9 points 2 years ago

👏

I recognize there’s a likelihood you are usually being paid for answers like that. Thank you for satisfying my curiosity for free :)

Absolutely, and it’s usually up to the organization disposing of the drives to set and document the standard by which they abide.

this post was submitted on 07 May 2024
679 points (98.3% liked)

Selfhosted

62018 readers
1155 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS