Standard:
YALE-MSS-7.5: Sanitize systems before re-use
YALE-MSS-7.5.2: Follow the University Chain of Custody process for devices being re-used or disposed of
Low Risk Endpoint
Not Required
Moderate Risk Endpoint
Not Required
High Risk Endpoint
Required for HIPAA
Low Risk Server
Not Required
Moderate Risk Server
Not Required
High Risk Server
Required for HIPAA
Low Risk Mobile Device
Not Required
Moderate Risk Mobile Device
Not Required
High Risk Mobile Device
Required for HIPAA
Low Risk Network Printer
Not Required
Moderate Risk Network Printer
Not Required
High Risk Network Printer
Required for HIPAA
Details
If the IT System is leaving the covered entity, Yale requires a Chain of Custody form. Yale requires this form if the IT System is being re-purposed for Yale business or for personal use. See the "Guideline for Repurposing and Recycling IT Systems Securely" for more details.