The following are definitions of industry words or terms also used in the i-SIGMA Certification Programs.
If Confidential Customer Media is stored in a facility longer than three business days, the facility is classified as a Transfer Processing Station (see definition and application criteria for details).
In the event that the Applicant location maintains its own commercial records storage center, and stores/stages Confidential Customer Media generated for destruction from that facility exclusively, the facility is NOT considered a Collection Facility. However, if a records storage center is also used to store Confidential Customer Media on an intermediary basis while in transit from customer location to a separate destruction facility, it is then classified as a Collection Facility.
A Collection Facility must meet all Operational Security requirements (see section 2 in the criteria) as a destruction facility with the exception of a CCTV monitoring and recording system.
Where it is not practical to have such an Agreement directly with an individual, a letter from the Subcontractor, verifying that such an Agreement has been executed by any of their agents intended to serve in the same capacity as an Access Individual would be acceptable.
For more information regarding these or other industry terms, please contact i-SIGMA staff.