AI ITAM Platform
IT Asset Management Software: The Features That Matter
An asset register in Excel answers “what do we have?” badly and “who approved that change?” not at all. Here is what an ITAM platform must add.
Key takeaways
- Clear protects against simple recovery; purge against laboratory recovery.
- Destroy when media cannot be purged or the data demands it.
- SSDs need purge methods such as cryptographic erase.
- Record the method and keep a certificate per asset.
The three levels
| Level | What it does | Typical use |
|---|---|---|
| Clear | Overwrites user-addressable storage with standard tools | Reuse inside the organization |
| Purge | Makes laboratory recovery infeasible — e.g. cryptographic erase or firmware sanitize commands | Reuse outside the organization, sensitive data |
| Destroy | Physically destroys the media — shred, disintegrate, incinerate | Media that cannot be purged, highest classifications |
Solid-state drives
SSDs remap blocks, so overwriting may leave data in reserved areas. Use purge methods supported by the drive, such as cryptographic erase or the manufacturer’s sanitize command, and verify the result.
Choosing the method
Base the decision on the data’s classification and the device’s destination. A useful rule: if the device leaves your control, purge or destroy.
Evidence
- Asset ID and serial number
- Media type and storage serials
- Method and tool used
- Who performed and who verified
- Date and location
- Certificate of destruction from any disposal vendor
Making it part of the lifecycle
Block the final “disposed” status until the sanitization method is recorded and approved, and generate a disposal certificate automatically. This is the evidence ISO 27001 control A.7.14 (secure disposal or re-use of equipment) expects.
Device-by-device guidance
| Media | Practical approach |
|---|---|
| Hard disk drives | Overwrite to clear; degauss or destroy where required |
| Solid-state drives | Cryptographic erase or sanitize command; destroy if unsupported |
| Mobile phones and tablets | Encryption plus factory reset with crypto erase |
| Printers and copiers | Sanitize internal storage before return or resale |
| Network appliances | Factory reset and verify; destroy storage if sensitive |
| Removable media | Overwrite or destroy |
Working with disposal vendors
- Contract for the methods and standards to be used.
- Require chain of custody from collection to destruction.
- Obtain certificates listing serial numbers.
- Audit the vendor periodically.
- Reconcile certificates against your disposal records.
Verification
Sanitization should be verified, not assumed. For overwrite methods, sample-read the media after clearing; for cryptographic erase, confirm the drive reports a successful sanitize operation; for destruction, check that particle size or physical damage meets your requirement. Record the verification alongside the method so the certificate is backed by evidence.
How NAZZTEC helps
NAZZTEC AI ITAM automates this end to end — with AI assistance, segregation of duties, analytics and signed reports — and is available as SaaS, in your private cloud or on-premises. Our consultants design and run the process alongside it through our IT Asset Management services.
Next step: request a demo of NAZZTEC AI ITAM or read more on the product page.
Frequently asked questions
Is formatting a drive enough?
No. Formatting leaves most data recoverable.
Do phones and printers need sanitization?
Yes — any device with storage, including multifunction printers and network appliances.
Can a vendor certificate replace our records?
It supports them, but keep your own record linking each asset to the method and certificate.
NAZZTEC Editorial TeamWritten and reviewed by NAZZTEC practitioners. This briefing is general guidance, not legal advice.
