163e7687_Standards_for_Data_Stewardship__Category_I
[#] 4.2.5 [Action] Disposing of documents [Category-II] Adhere to retention schedules. Physical destruction beyond ability to recover (e.g. office cross-cut shredder). [Category-III] Refer to retention schedules. No special requirement. [Category-I] 
Adhere to retention schedules. Employ the services of the preferred vendor for records management and destruction.
Information Security Office - Minimum Security Standards for Data Stewardship
Category-I