The Hidden Compliance and Cybersecurity Risks in Retired IT Assets

The Hidden Compliance and Cybersecurity Risks in Retired IT Assets 
Preventing Data Breaches, Compliance Failures and Regulatory Scrutiny Through Proper IT Asset Disposition

Tuesday, November 3, 2026  
1 - 2 p.m. Eastern; noon - 1 p.m. Central; 10 - 11 a.m. Pacific

Healthcare organizations have invested heavily in protecting protected health information data in active technology assets, yet the retirement of laptops, servers, storage devices, mobile devices and clinical technology often receives far less attention. This webinar examines the cybersecurity, compliance and operational risks that can emerge when end-of-life technology is removed from service without adequate controls, documentation and governance. Attendees will explore how retired assets can create exposure related to data privacy, regulatory compliance, audit readiness and organizational risk.

Drawing from real-world asset retirement practices, this session will provide healthcare leaders with practical strategies for establishing secure, auditable and defensible end-of-life processes. Participants will learn how stronger chain-of-custody controls, documented data-destruction procedures and improved visibility into retired technology assets can help reduce risk, support compliance objectives and strengthen overall cybersecurity posture. The webinar will also discuss how organizations can address the often-overlooked reality that technology risks do not always disappear when a device leaves production.

Attendees Will Learn:

• The cybersecurity, compliance and operational risks associated with retired and surplus data-bearing devices.
• Common audit and regulatory challenges resulting from incomplete asset inventories, weak chain-of-custody practices and insufficient documentation of data destruction.
• Best practices for creating a repeatable and defensible IT asset retirement process that supports HIPAA, privacy and HHS/OCR governance requirements.
• How collaboration between IT, cybersecurity, risk management, compliance and asset management teams can improve organizational resilience.
• Recognize why end-of-life technology requires the same level of oversight as active assets, including the concept that certain risks may increase even as an asset's financial value declines.

Speakers:

Mike Siegler 
Owner & CEO 
Maxxum 

Moderator:

John Riggi  
National Advisor for Cybersecurity and Risk  
American Hospital Association