State audit finds college generally sanitized surplus IT devices but recommends periodic verification testing

At a public hearing of the Joint Legislative Audit and Review Committee on Aug. 9, 2025, the Washington State Auditor’s Office reported that a performance audit found a college generally removed or properly sanitized confidential data from surplus IT equipment but recommended the institution document periodic verification testing for devices sold at auction.

The audit, conducted under Initiative 900 and presented by Olha Bilobron, Senior Performance Auditor for the Washington State Auditor’s Office, tested 32 devices and found that in all sampled cases hard drives had either been removed or properly sanitized. "That is why we recommend that the College develops and documents a procedure to periodically test its sanitized equipment sold through auction," Bilobron said, adding auditors connected the college with Washington Technology Solutions to help set an appropriate testing volume and frequency.

State law requires public colleges to destroy or arrange…