+SYS.4.1.A17 Protection of Payloads and Metadata (S)

SYS.4.1.A17 Protection of Payloads and Metadata (S)

Payload data and metadata such as print jobs and scan files SHOULD only be stored on devices for as short a time as possible. Data SHOULD be deleted automatically after a predefined amount of time. File servers on such devices and functions such as “scan to device memory” SHOULD be disabled by the IT Operation Department. The protocols and functions required for this SHOULD be blocked whenever possible.

In general, the IT Operation Department SHOULD ensure that no metadata is visible to unauthorised parties. Organisations SHOULD regulate how printouts with metadata are to be passed on to third parties.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.19 Disclosure of Sensitive Information