Do you think it’s possible for old decommissioned drives to be donated in a compliant manner?
Reference for others:
ISO/IEC 27001 is an international standard to manage information security. … It details requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS) – the aim of which is to help organizations make the information assets they hold more secure. Organizations that meet the standard’s requirements can choose to be certified by an accredited certification body following successful completion of an audit.