12.3.3 The relevant entities shall review and, where appropriate, update the policy at planned intervals …

Requirement

The relevant entities shall review and, where appropriate, update the policy at planned intervals and when significant incidents or significant changes to operations or risks occur.

Guidance

• Regularly monitor and audit the use of removable media to ensure compliance with the policy.

Examples of evidence

• Up-to date removable media policy.
• Records of reviews or history of changes.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• ENISA -