A Leading UK Authority in Software Asset Management & IT Compliance

Cradle to grave Software Asset Management

FASTtalk January 2009

Organisations must ensure that they have a WEEE compliance process for the lifecycle of their software assets.

Here, Rupinder Lakhanpal, FAST Key Account Manager, explains how to put an effective management process in place.

There are 21 pieces of legislation that are associated with Software Asset Management and Compliance, which we describe as ‘cradle to grave control’ and cover the complete lifecycle of software and any asset associated with it. Today, this can mean anything classified as an asset: PCs, laptops, faxes, printers and a number of storage and portable devices.

The Waste Electrical and Electronic Equipment Directive (WEEE Directive) is intended to make us all think about the impact that the disposal of electrical and computer equipment has on the environment. At the same time, it also ensures that all resident information or data loaded on the software or device relevant to all previous owners has been removed. Those companies that have stringent policies and procedures in place, starting from the introduction of any new hardware to its expiration of use, end of licence or term, can ensure the Directive is adhered to and disposal is executed correctly.

What should be the process to manage WEEE compliance?

All software and hardware assets should be tagged and catalogued in a licence management and inventory tool to assist in identifying exactly where they are and when they have been disposed of.

A number of companies regularly upgrade their equipment and simply throw away their hardware because it’s incompatible, obsolete or old. If you have ‘cradle to grave control’ then this will be done as part of your day-to-day ‘business as usual’ operation, culminating in one of two choices: using a disposal company or working with a recycling company.

There are now a number of professional computer disposal equipment companies that will offer to collect your old hardware and ensure it is destroyed in accordance with the WEEE Directive. A report or summary detailing what has happened to the equipment is provided, letting you know what has been done with the hardware while offering you peace of mind that all data has been wiped clean from the device. It also means your due diligence has been completed in accordance with the legislation.

Some companies work closely with a number of charities who will refurbish and reuse their hardware. Most charities are happy to accept old and upgraded PCs and will guarantee that once they have finished using the equipment they will dispose of it ethically.

In some cases the parts are fragmented and sold on. It is important to understand that most regulatory bodies will ask to see proof of your disposal trail and also ask you to confirm whether or not a reputable supplier who works in accordance with the Directive was used as part of the audit process. This is to ensure nothing has contaminated the disposal process and that business as usual procedures have been followed throughout the organisation. It is also important to understand that responsibility does not necessarily have to lie with IT; in some cases, it can be with Quality Assurance or sourcing departments.

Remember, ‘cradle to grave control’ is an imperative if IT equipment is to be disposed of in line with the WEEE Directive.

FAST and IRIS are trade marks. © FAST Ltd . All rights reserved. All other marks are the property of their respective owners.