How to implement the control:
For small to medium companies this control can be satisfied by purchasing a high quality shredder for your office (or offices) and mandating that all physical paper waste has to be shredded. For larger enterprises there are waste disposal services that will come and collect your confidential waste before destroying it onsite, either by shredding or incineration. These services will typically provide a certificate of destruction once complete. If confidential waste is going to be stored onsite in bins before being destroyed by a third party these bins should be secured with a lock.