Case study: How Ecobraz eliminated a multinational's IT liabilities (in 60 days)

Introduction

This study details the process by which Ecobraz completely eliminated a multinational's IT liabilities in just 60 days. This action was carried out based on robust technical protocols and full compliance with current legislation, including the guidelines of the National Solid Waste Policy (Law No. 12.305/2010) and specific information security regulations.

Context of IT Liabilities

Technological liabilities refer to the set of obsolete or unused equipment, media and devices that remain stored or disposed of inappropriately, posing environmental and information security risks for organizations. Inadequate management of these elements contravenes the regulations set out in article 6 of Law No. 12.305/2010, which establishes shared responsibility for the life cycle of electronic waste.

Initial Diagnosis and Planning

The initial assessment carried out by Ecobraz identified a large volume of surplus technological assets, including devices stored without control and digital media containing sensitive data. The strategic plan included a detailed inventory, the scheduling of electronic waste collection and the application of data sanitization procedures in line with international best practices.

Execution and Technical Methodology

Execution was based on three essential pillars:

• Monitored Collection: Use of certified transport in accordance with the environmental licensing and Brazilian technical standards.
• Secure Media Sanitization: Application of physical and logical methods for destroying data on hard drives and digital media, in accordance with the procedures indicated by hard drive sanitization, guaranteeing the total elimination of information and mitigation of cyber risks.
• Environmentally Appropriate Disposal: Treatment and recycling of electronic waste in accordance with the National Solid Waste Policy and SINIR technical standards (sinir.gov.br), guaranteeing the reuse of materials and minimizing the environmental impact.

Legal Compliance and Information Security

In addition to environmental compliance, the operation paid attention to the information security regulations issued by NIST (csrc.nist.gov), adopting practices for the secure disposal of data, in accordance with the recommendations of Special Publication 800-88. Legal compliance was guaranteed by alignment with the precepts of the Marco Civil da Internet (Law No. 12.965/2014) and other current regulations.

Results and Benefits

The project resulted in the complete elimination of IT liabilities, optimization of physical space and a significant reduction in environmental and information security risks. The 60-day timeframe reinforces the effectiveness of Ecobraz's methodology, which combines technology, legislation and sustainability in customized solutions, recommended for organizations seeking to mitigate risks and meet legal obligations.

Conclusion

This study demonstrates that, through a structured model aligned with current legislation, it is possible to eliminate IT liabilities for large organizations in a short timeframe. Adherence to technical and legal standards is essential to ensure the sustainability and protection of corporate data, contributing to environmental compliance and information security.