Steeright Systems Inc.

SteeRight Systems Inc. is a medium-sized auto parts manufacturer, situated in Cambridge, Ont., that manufactures steering column subassemblies for the North American automotive industry.  Recent financial statements show that the company had 2014 revenues of $50M, up from $45M the previous year.  Profits before taxes in 2014 were $2.5M.

The company was founded in 1985, and now has 100 employees.  The company’s head office is located with its plant in Cambridge.  Most of the company’s business comes from orders placed from Canadian and Northern US plants, but the company would like to expand its sales to both Mexican and Asian markets.

The company employs 10 people in its Management Information Systems group, maintaining a number of systems that receive automated orders from its customers, control its production schedules, maintain its extensive inventories of parts and subassemblies, and track logistics of its order fulfillment.  The systems also handle its general office functions of email, document storage, and accounting procedures.

You are Alex Steele the director of IT for SteeRight. Yesterday your CEO Bill Smart called you into his office and informed you he had a telephone call from a reporter with a major Canadian newspaper. Apparently, the reporter had purchased a used smartphone and found a list of SteeRight’s customers with their phone numbers and addresses on the device.

Bill convinced the reporter not to make an issue of this and he hopes no newspaper article will result. The CEO wants to know “WHAT THE Hell you are doing about the disposal of used Electronic devices!”

Once he calmed down, he informed you that he wants a report on the number and type of

electronic devices SteeRight disposes of each year, the disposal process and a description

of the process used to ensure confidentiality of corporate and client data. Bill also

informed you  an environmental group is currently investigating them. He tells you that in addition to disposing of the electronic devices so as to protect corporate data, the disposal process must be environmentally sound as well.  He believes that environmental group will use