Skip to content
Information technology equipment
ASD ISMISM-1219

ASD ISM 1219 Inspect and destroy MFD print drums and image transfer rollers

What it says

MFD print drums and image transfer rollers are inspected and destroyed if there is remnant toner that cannot be removed or a print is visible on the image transfer roller.

Quoted as published. Everything else on this page is written by Control Stack.

What it means

In plain English

Inspect multifunction device print drums and image transfer rollers, and destroy any that still hold remnant toner or show a visible print.

A multifunction device (MFD) is the office machine that prints, copies and scans. Inside it, the print drum and the image transfer roller carry the toner that forms each page, and they can keep a faint copy of what was printed. Before you dispose of, return or recycle one of these parts, someone must look at it closely and physically destroy it if any leftover (remnant) toner cannot be cleaned off or if you can still see a printed image on the roller. This stops sensitive documents from being read off the part after it leaves your control.

Why it matters

If a print drum or image transfer roller leaves with leftover toner or a visible image, someone could read sensitive printed documents off the discarded part, exposing confidential information.

How to implement

  1. The office manager or IT coordinator should add a step to the MFD disposal checklist requiring that the print drum and image transfer roller are removed and visually inspected before the device or part leaves the building.

  2. Whoever performs the inspection should hold each part under good light and check for any remnant toner that will not wipe off and for any visible printed image on the image transfer roller, recording the result against the device serial number.

  3. If toner cannot be removed or a print is still visible, the assigned staff member should physically destroy the drum and roller (for example by shredding, crushing or sending to a certified destruction service) rather than simply wiping or returning them.

  4. When the MFD is leased, the business owner should write this inspect-and-destroy requirement into the lease return terms so the leasing company cannot collect parts that still carry readable images.

  5. The person responsible should keep a short destruction record for each MFD, noting the date, the device, who inspected it and how the drum and roller were destroyed, and store it with other disposal paperwork.

Keep it running

Build the drum and roller inspection into routine MFD decommissioning and leased-device returns, and keep dated destruction records so each device's outcome can be traced later.

Evidence and audit

  1. Check 1 of 5What an auditor asks for

    Ask for

    the MFD disposal or sanitisation procedure.

    Look at

    an explicit step covering inspection of the print drum and image transfer roller.

    Good evidence

    names who inspects, what they check for (remnant toner that cannot be removed, a visible print on the roller) and the destruction action that follows.

  2. Check 2 of 5What an auditor asks for

    Ask for

    destruction records for MFDs disposed of in the audit period.

    Look at

    entries tying each device to its drum and roller outcome.

    Good evidence

    shows every device has a matching inspection result and, where needed, a destruction record.

  3. Check 3 of 5What an auditor asks for

    Ask for

    how staff decide whether a drum or roller must be destroyed rather than reused or returned.

    Look at

    the test of leftover toner or a visible image.

    Good evidence

    matches the control exactly: destroy if remnant toner cannot be removed or a print is visible.

  4. Check 4 of 5What an auditor asks for

    Ask for

    to see evidence of how the parts were destroyed, such as certificates from a destruction service or photos.

    Look at

    a method that renders the part unreadable.

    Good evidence

    is shredding, crushing or certified destruction, not just wiping.

  5. Check 5 of 5What an auditor asks for

    Ask for

    how leased or returned MFDs are handled.

    Look at

    the lease return terms or supplier agreement.

    Good evidence

    shows the inspect-and-destroy requirement applies even when the device is collected by a third party.

Mappings

Closest match in ISO/IEC 27001: A.7.14, Secure disposal or re-use of equipment, which this control partially meets.

ISO 27001

ISO/IEC 27001: 1 mapping

Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.