+SYS.4.5.A4 Drawing Up a Policy for the Secure Handling of Removable Media (S)

SYS.4.5.A4 Drawing Up a Policy for the Secure Handling of Removable Media (S)

A policy on the proper handling of removable media SHOULD be established. The following fundamental aspects SHOULD be taken into account:

  • which removable media can be used and by whom
  • which data may be stored on removable media
  • how data stored on removable media will be protected against unauthorised access, tampering, and loss
  • how data on removable media is to be deleted
  • whether and how private storage media are allowed to be used
  • the external employees or service providers with whom storage media may be exchanged and which security regulations are to be observed
  • how storage media are to be sent
  • how to prevent the spread of malware via removable media

An organisation SHOULD also specify the conditions in which storage media are to be stored in its security policy. In particular, it SHOULD specify that only authorised users have access to the storage media described. It SHOULD also specify that the respective manufacturers' instructions on handling media should be taken into account.

Regular checks SHOULD be carried out to ensure that the security specifications for handling removable media are still up to date.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.39 Malware