OPENING · THE SEVEN

You’re Done With It.
It Isn’t Done With You.

Every organization has a place where old technology goes to wait.

Sometimes it is a locked room beside the help desk. Sometimes it is a warehouse cage, a row of pallets, a cabinet full of phones, or a shelf that seems to reproduce docking stations after everyone goes home. The labels change. “Surplus.” “Retired.” “To be recycled.” “Pending disposition.”

The meaning is usually the same: we are finished with this stuff.

Except we are not.

A laptop can leave an employee’s desk and still carry company data. A server can stop producing business value and still contain information someone would very much like to have. A phone can be obsolete to its owner and useful to somebody else. A switch, printer, storage appliance, monitor, battery, or box of mixed electronics can move from asset to liability to commodity to reusable product, depending on what happens next.

That is the part most organizations underestimate.

Buying technology is visible. Deploying it is visible. Supporting it is visible, especially when it breaks five minutes before an important meeting. Retirement is quieter. The device leaves the active environment, the ticket gets closed, the replacement is installed, and everyone moves on.

Responsibility does not.

In 2020, the Office of the Comptroller of the Currency assessed $60 million in penalties against two Morgan Stanley banks over deficiencies tied to the decommissioning of two data centers. The regulator cited failures involving risk assessment, vendor and subcontractor due diligence, monitoring, and inventory of customer data on retired hardware.¹

Two years later, the Securities and Exchange Commission imposed a separate $35 million penalty on Morgan Stanley Smith Barney over failures to protect customer information. The SEC said the firm had used a moving and storage company with no data-destruction expertise to decommission thousands of drives and servers. Some devices were later resold, and a separate reconciliation found 42 servers potentially containing unencrypted customer information were missing.²

The important lesson is not the size of either penalty. It is how quickly retired hardware became a cybersecurity, vendor-governance, inventory, privacy, and executive-risk problem.

These, and countless other examples, have led me to create the Seven Questions to Ask Before Anyone Takes Your Retired IT.

The Seven cannot guarantee that failure will be prevented. They can, however, create points where assumptions have to become answers and answers have to become evidence: Who is qualified to perform the work? Who can subcontract it? How will assets be reconciled? What process applies? What records come back?

The equipment was retired. The responsibility was not.

For years, I worked across the electronics reuse, recycling, and information technology asset disposition ecosystem as founder and president of TERRA, the Electronics Reuse & Recycling Alliance. I spent that time listening to providers, technology companies, sustainability leaders, procurement teams, and the people responsible for data after a device stopped being useful to its first owner. My earlier work in sales, marketing, and partnerships taught me to look for the decision underneath the service being sold. That combination led me to a simple conclusion: retired technology is not primarily a waste problem. It is a decision problem.

I kept seeing the same thing: a company thought the job was finished when the equipment left the building. But that was exactly when the important decisions started. Who had it, what happened to the data, what still had value, and where the rest went? The truck was not the finish line.

What kept me interested was not disposal. It was the possibility of extending the useful life of technology, recovering value responsibly, and building enough trust and evidence that reuse and recycling could be treated as disciplined business processes rather than afterthoughts.

The buyer has to decide whom to trust with an asset that may still contain data, residual value, reusable components, hazardous or regulated materials, and a trail of accountability.

That is a lot to put on a pickup truck.

You can outsource the work. You cannot outsource the decision about who is trusted to do it.

This book is built around seven criteria I developed for evaluating electronics lifecycle providers, each framed as a question: Certification, Capacity, Knowledge, Process, Integrity, Transparency, and Economics.

They are not a certification program, a legal standard, or a universal score for choosing a provider.

They are a way to ask better questions.

The point is not simply to avoid a bad outcome. Done well, electronics lifecycle management can protect data, preserve the useful life and residual value of equipment, recover materials responsibly when reuse is no longer practical, and give an organization evidence that its technology was handled the way it intended.

My starting point is certification. I thoroughly believe that #CertificationMatters. For the kinds of electronics lifecycle engagements discussed in this book, I want an independently certified provider in the conversation. But certification is the starting line, not the finish. A certificate cannot tell you by itself whether the specific facility has the capacity for your program, whether the people understand your requirements, whether the process matches the sales presentation, whether downstream partners are being managed appropriately, whether the reports can be reconciled, or whether the economics make sense.

That is why there are seven criteria instead of one.

The next few chapters start before provider selection. First we need to fix the mental model.

There is no useful business category called “gone.” There is only what happens next.