
Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Operational data should never reach the secondary market. Coretek 360 retires control room, substation, and office hardware from every site, with media sanitized to NIST 800-88 and the evidence ready for your CIP files.
Get a quoteMedia from BES Cyber Assets and other operational systems is sanitized to NIST 800-88 or destroyed, and your CIP compliance manager gets the disposal evidence CIP-011 audits ask for without running the project.
We map plants, substations, field sites, and offices into one plan covering SCADA and HMI computers, engineering laptops, rugged field units, and office fleets. Work is fitted around outages, escort rules, and physical security perimeters.
Equipment is collected from remote and secured sites in tracked vehicles under documented chain of custody, or media is shredded on site before any asset leaves the perimeter.
Media from control and operational systems is wiped to NIST 800-88 and verified, or shredded, supporting NERC CIP-011 requirements for BES Cyber Asset reuse and disposal. Shredding is done in house by Coretek 360. It is not yet covered by our R2v3 certificate, and we are actively working to add it.
Office fleets, engineering laptops, and servers cleared for release are refurbished and resold through our sales channels, only after their media is sanitized, with the value returned to you. Everything else goes to R2v3 certified downstream processors, as a RIOS Certified Recycler.
A final report accounts for every asset by serial number, with a certificate of data destruction for each drive. Your CIP compliance, OT engineering, and audit teams have the evidence of sanitization in their files.
Coretek 360 handles disposal across every site you run and keeps your CIP files ready.

How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.

Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.

How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.

Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.

What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.