Contact Us (905) 847-2583

Self-Assessment

Please click the button that applies to you and then click the Calculate button below to get document security level:

Question Yes No
  1. Do you periodically screen/audit your waste systems for sensitive documents?
  1. Are you 100% certain that employees are not throwing sensitive documents into the trash or recycling bins?
  1. Do you have a designated Privacy or Security Officer responsible for document security?
  1. Do you have a formal document destruction policy and procedure manual?
  1. Are new and existing employees trained on how to handle confidential material?
  1. Do you audit your information destruction service provider's security procedures? (if no service provider click yes)
My Security Level is:
Results:   Resources:
Periodically screen/audit your waste systems for sensitive documents:
Periodic audits of your waste system (trash/ blue bin recycling program) will prove whether your policy and document disposal program is working. Your document security system is only as good as its weakest link. Many decision-makers who audit the waste system are disappointed in the results. Schedule periodic audits of your paper waste system to ensure employee compliance.
-> Employee
Compliance Audit
Report
Available for
download below
Employees can be throwing sensitive documents into the trash or recycling bins:
Most companies believe they have a fool-proof system but don't audit it regularly. The implementation of a quality document security program, followed up by a periodic audit process, will ensure you are doing all that you can to capture sensitive information where it counts - at the source. Your document disposal program will only be as good as its weakest link; it is important to educate employees on your practices. If your secure shredding program is inconvenient, it will result in confidential documents ending up in the trash or blue recycling bins. Periodic audits, friendly reminders and education will ensure continued compliance with policies and encourage proper document disposal practices.
-> Policy Violation
Report
Available for
download below
Assign Privacy Officer/Security Officer:
This is a person employed by your organization who encourages compliance with the security policies & procedures as well as any other provisions of the Personal Information Protection and Electronic Data Act (PIPEDA). The Act states that an organization must designate an individual to be responsible for ensuring the organization complies with government regulations. In most cases, new hires are not necessary.
-> Information
Protection Contacts
Template
Available for
download below
Create information destruction policy and procedure manual:
The foundation of a secure document disposal program is a company-wide policy. Without a formal destruction policy, your organization's information is at risk and is vulnerable to corporate espionage and identity theft. This can lead to loss of proprietary information resulting in lost revenue, loss of market share and employee layoffs. When designing a policy, one must ensure it is clear and concise.
-> Information
Destruction Policy
Template
Available for
download below
Provide information security training to new and existing employees:
Your information security is only as good as its weakest link. Have your HR department provide new and existing employees with a copy of your document disposal policy for acknowledgment, and training on proper disposal of information. Follow up annually to encourage proper practice and adherence to your policy and procedures.
-> Employee
Awareness
Template
Available for
download below
Auditing you information destruction service provider`s security procedures:
Organizations often overlook due diligence when choosing a shredding service provider. Most make their selections based on the lowest price, without properly estimating the value of the vendor's certification standards, their security process and auditing services. Similar to your own system, shredding service providers are only as good as their procedures.
-> Contractor
Compliance Audit
Report
Available for
download below
Download Resources


Employee Compliance Audit Report Information Destruction Policy Template
Policy Violation Report Employee Awareness Template
Information Protection Contacts Template Contractor Compliance Audit Report

 *Required Fields