Cedar Rapids Government IT Procurement Guide | STS
Presented by STS Electronic Recycling

Cedar Rapids Government IT Procurement Guide

What Cedar Rapids and Linn County government agencies need to know about BuyBoard and TIPS co-op procurement, FISMA and NIST SP 800-88 Rev. 2 compliance, and compliant IT surplus disposal protocols. Download and share with your team.
Free Download • No Registration Required
Save this guide for offline reference

Why Cedar Rapids Government Agencies Can't Afford to Get IT Disposal Wrong

If you're managing IT equipment for the City of Cedar Rapids, Linn County Government, the Iowa Department of Administrative Services, or Eastern Iowa Airport, you already know the procurement side of the job. What's less clear for most Public Sector IT Managers is what comes next: when equipment ages out and disposal documentation is needed for grant closeouts, compliance reviews, and annual audits.

Cedar Rapids sits at an unusual intersection. It's home to Collins Aerospace (8,000 employees), one of the largest defense electronics employers in the country, and the broader Cedar Rapids-Iowa City corridor is recognized nationally as a defense technology hub. That creates a ripple effect for the surrounding public sector. Government agencies in Linn County often operate within federal program frameworks, and the data security expectations in that environment don't stop at the contractor's boundary.

What happens when Cedar Rapids government IT equipment isn't retired correctly? A breach notification, an OIG review, or a grant audit that traces liability back to the disposal decision. Government agencies don't get to treat IT retirement as a facilities matter. It's a compliance event, and the documentation follows you.

"We had a server we thought was empty. IT had pulled the drives for reuse, but the server itself still had firmware logs with vendor credentials embedded. Our auditor flagged it during a routine review. It hadn't left the building yet, which was lucky. Most agencies don't catch it until it does."
IT Director, Midwestern County Government (composite scenario)
$4.5M
Average cost of a government data breach (IBM Security, 2024)
60%
Share of government breaches traced to endpoint and storage devices

STS Electronic Recycling provides documented IT asset disposal for Cedar Rapids government agencies and Linn County departments. Operating since 2011 and serving organizations across all 50 states, STS handles scheduled pickup, device-level certificates of destruction, and chain-of-custody reporting through final processing for Cedar Rapids public sector organizations, from City of Cedar Rapids departments to Iowa Department of Administrative Services offices.

Iowa's Surplus Property Rules and What They Mean for Your Agency

Before any government device leaves your control in Iowa, there's a process to follow. Iowa Code Chapter 8A governs state property management through the Iowa Department of Administrative Services. If you're at a state agency or an entity receiving state funding, equipment doesn't simply get thrown out or donated without documentation. It gets formally declared surplus first, which triggers transfer, donation, or disposal requirements depending on the equipment's value and condition.

For Cedar Rapids and Linn County agencies, the applicable rules come from your own purchasing authority and from any grant agreements. Under 2 CFR Part 200 (the Uniform Guidance), equipment purchased with federal funds carries formal disposition requirements that documented STS disposal directly satisfies, covering public safety, transportation, emergency management, and infrastructure programs. If federal money bought the equipment, federal rules govern its retirement.

Where Most Agencies Miss the Mark

What Triggers a Formal Disposal Process in Iowa

Any federally funded equipment over $5,000 requires formal disposition reporting to your program officer. Equipment from HIPAA-covered programs (public health departments, for example) requires certified data destruction documentation before disposal or donation. Equipment donated to schools or nonprofits, including Kirkwood Community College (~14,000 students) or Cedar Rapids Community School District (~1,800 employees), transfers the data liability to your agency if you didn't certify destruction first. Surplus transfers to other agencies require written data sanitization documentation.

Declaring equipment surplus is the easy part. Proving the data is gone, in a way your auditor will accept, is where the process gets complicated. Iowa DAS has guidance available for state agencies, but city and county agencies often operate without a clear policy until a problem surfaces. Getting that policy written before a refresh cycle, not during one, is the move.

For Cedar Rapids Community School District and Kirkwood Community College: FERPA requirements layer on top of standard surplus rules when student data is involved. STS engagements with public sector IT typically include chain-of-custody reporting that satisfies documentation requirements across multiple governing frameworks simultaneously, whether the applicable standard is FERPA, HIPAA, or 2 CFR Part 200.

How Do BuyBoard and TIPS Help Cedar Rapids Agencies Avoid a Full RFP?

Running a full RFP for electronics disposal services is time-consuming and often unnecessary. If you're managing procurement for Cedar Rapids, Linn County, or a state agency with a Cedar Rapids office, two national cooperative purchasing vehicles have already done the competitive bidding work: BuyBoard and TIPS (The Interlocal Purchasing System).

BuyBoard

National cooperative purchasing program used by more than 50,000 public agencies across the US. Pre-competitively bid contracts cover electronics disposal and ITAD services. Accepted by Iowa municipalities, counties, and state agencies. Qualifying service contracts don't require additional board-approved bidding in most Iowa jurisdictions.

TIPS (Interlocal Purchasing System)

National cooperative with strong Midwest coverage and deep Iowa adoption. Electronics recycling and data destruction vendor contracts already competitively bid and documented. Transparent pricing with auditable vendor vetting. Compliant with Iowa competitive purchasing requirements for most agency types.

Using either vehicle satisfies the competitive bidding requirement for most Iowa municipalities and counties without running a formal RFP. That matters when you're working against a lease return deadline, clearing a data center on a fiscal-year timeline, or replacing workstations across multiple Linn County departments at once. The EPA estimates 2.7 million tons of electronic waste reach U.S. landfills annually; co-op programs that accelerate compliant disposal help agencies meet both environmental and audit requirements on the same timeline.

Before You Use a Co-Op Contract, Verify These Four Things

When Cedar Rapids government procurement officers evaluate co-op vendor options, they typically verify four things: purchasing policy authorization, service category alignment (recycling vs. ITAD vs. data destruction are treated differently), current contract status (not just historical awardee listing), and written scope documentation before scheduling a pickup. Most Public Sector IT Managers recommend pre-qualifying the vendor before a specific project creates deadline pressure.

STS Electronic Recycling's Cedar Rapids government electronics recycling services are structured to work within co-op procurement frameworks and can provide scope documentation your procurement office needs to close the contract file.

What FISMA and NIST SP 800-88 Rev. 2 Actually Require at Equipment Retirement

FISMA (the Federal Information Security Management Act) applies to any agency handling federal data. For Cedar Rapids and Linn County, that includes any agency receiving federal grants, running public safety or emergency systems with federal components, or working within federal program frameworks. FISMA in practice means NIST. And for media sanitization at equipment retirement, the current standard is NIST SP 800-88 Rev. 2.

Under NIST SP 800-88 Rev. 2 guidelines, media sanitization must render data recovery infeasible at the verified purge level, the requirement STS destruction documentation meets for Cedar Rapids government organizations. Note that NIST SP 800-88 Rev. 1 was withdrawn effective September 26, 2025. Any vendor citing Rev. 1 is referencing superseded guidance; contracts and certificates should specify Rev. 2 compliance.

NIST SP 800-88 Rev. 2 Sanitization Categories

Clear: Software-based overwriting. Used for equipment being redeployed within the same security boundary. Not appropriate for surplus disposal.

Purge: Cryptographic erase or degaussing. Required before equipment leaves your custody for surplus transfer or third-party disposal. This is the baseline for government IT retirement.

Destroy: Physical destruction. Required for classified or highly sensitive media with no reuse value.

For equipment going to an ITAD vendor or recycler, Purge-level sanitization is the minimum standard. The vendor needs to document the method, the technician, and the serial number of every device processed. A batch certificate covering "200 laptops" is not the same as device-level documentation. An auditor reviewing an incident will ask for the specific device.

Do you have a DoD 5220.22-M requirement in your disposal policy? This overwrite standard applies to non-classified controlled unclassified information (CUI) and is still cited by agencies with defense contractor relationships, particularly those working near Collins Aerospace's federal programs in the Cedar Rapids-Iowa City corridor. If your policy references it, your vendor should certify compliance in writing alongside NIST documentation.

Cedar Rapids data destruction services from STS include NIST SP 800-88 Rev. 2 compliant Purge and Destroy protocols with device-level certificate of destruction documentation.

How Do Cedar Rapids Government Agencies Build a Compliant IT Disposal Program?

Government IT disposal failures in Cedar Rapids typically trace to missing policy, not bad intent. Without a written program, devices accumulate in storage, get sanitized inconsistently, and get donated without destruction verification. STS Electronic Recycling supports Cedar Rapids agencies in establishing pre-qualified disposal programs with NIST SP 800-88 Rev. 2 documentation, scheduled pickup, and chain-of-custody certificates before refresh cycles create deadline pressure.

Here's a practical framework for Cedar Rapids and Linn County agencies. It's not complicated, but it has to be written down and assigned to someone before a refresh cycle starts, not after.

  • Assign a designated IT asset manager with documented disposal authority. Someone needs to own this before equipment needs to go out the door.
  • Maintain a live device inventory with serial number, data classification, purchase date, and funding source for every active asset.
  • Adopt a written data destruction policy that cites NIST SP 800-88 Rev. 2 by name and specifies the sanitization level required for each device classification.
  • Pre-qualify your ITAD vendor before you have equipment to dispose of. Running a vendor selection during a refresh is how mistakes get made.
  • Require a device-level certificate of destruction for every unit, not a batch summary. Serial number specificity matters when auditors ask questions.
  • Document equipment donations with signed data destruction confirmations from the receiving organization before transfer.
  • Retain copies of all certificates for at least five years to support future audits, grant closeouts, or incident investigations.
  • Schedule an annual review of retired asset records to catch gaps before an audit finds them first.

Logistics Matter as Much as Policy

For large-scale refreshes, like a workstation upgrade across multiple Linn County departments or a data center migration for an agency with federal requirements, the logistics get more complex. Government agencies in Cedar Rapids and Marion typically expect same-week pickup scheduling and serial-level documentation when handling hundreds of devices against a fiscal-year deadline. Most Public Sector IT Managers confirm that equipment staging delays create more compliance exposure than the disposal event itself.

Cedar Rapids ITAD services from STS include same-week pickup scheduling for qualifying volumes and serial-level documentation delivered with each certificate of destruction.

What to Look For When Choosing a Vendor for Cedar Rapids Government IT Disposal

What should Cedar Rapids government IT managers look for in an electronics disposal vendor? Not every recycler is equipped for government work. The vendor you choose becomes part of your audit trail, and if their documentation doesn't hold up, your disposal record doesn't either. Grant auditors and state examiners in Iowa actively review vendor disposal files.

Third-Party Certification

When evaluating ITAD vendors for Cedar Rapids or Linn County contracts, look for current R2v3 certification. It's the electronics recycling industry's primary downstream accountability standard and requires regular third-party audits of the vendor's facilities and downstream processing partners. Ask to see the current certificate with an expiration date. An expired certificate doesn't protect you. Ask where the certified processing facilities are located and confirm the scope of the certification covers the services you're procuring.

Data Destruction Documentation

Confirm the vendor can certify NIST SP 800-88 Rev. 2 Purge-level sanitization and provide device-level certificates of destruction. Not batch summaries. Not a single page covering a truckload of laptops. Serial number documentation on every device is what converts your disposal event into an auditable record.

Chain of Custody and Pickup Logistics

The vendor should provide a manifest from pickup through final processing. You should be able to trace a specific device from your loading dock through sanitization or destruction to the certificate. For government work, same-week scheduling and flexible volume handling matter. Your operational timeline shouldn't be dictated by your vendor's capacity constraints.

Government agencies searching for electronics recycling near me across Cedar Rapids and Marion, with Linn County service routes near I-380, find STS Electronic Recycling provides chain-of-custody documentation through final processing and co-op-compatible service agreements. STS has served Cedar Rapids public sector organizations, including city departments and county agencies, since 2011 from our 200,000 sq ft processing operation. For Iowa government disposal requirements and procurement documentation, visit our government data destruction services page.

About STS Electronic Recycling

Where Your Equipment Is Processed

STS Electronic Recycling, Inc. is headquartered in Jacksonville, Texas, and has served schools, businesses, healthcare systems, and government agencies across all 50 states since 2011.

Equipment collected in Cedar Rapids is staged locally and transported to one of our two R2v3 certified processing facilities in Jacksonville, Texas and Houston, Texas, where all data destruction and material recovery takes place.

View all STS locations

About STS Electronic Recycling

STS Electronic Recycling, Inc. is a R2v3 Certified IT Asset Disposal Service Provider and Recycler based in Jacksonville, Texas. We provides free computer, laptop and tablet recycling as well as computer liquidation and ITAD services to schools, businesses and government agencies across the United States, processing all equipment through our R2v3 Certified processing facility in Jacksonville, Texas, ensuring that no matter where your business is located, your equipment is processed sustainably, transparently and securely.

R2v3 Certified Electronics Recycler Profile

Search