Valerie wants to employ a third-party secure data destruction company. What process is most frequently used to make sure that third parties properly perform data destruction?

The most common way to ensure that third-party secure destruction companies perform their tasks properly is to sign a contract with appropriate language and make sure that they certify the destruction of the materials they are asked to destroy. Manual on-site inspection by third parties is sometimes done as part of the certification, but federal certification is not a common process. Requiring pictures of every destroyed document would create a new copy, thus making it a flawed process.