+CON.6.A2 Proper Deletion and Destruction of Sensitive Resources and Information (B)

CON.6.A2 Proper Deletion and Destruction of Sensitive Resources and Information (B)

Sensitive information and storage media MUST be securely deleted or destroyed prior to disposal. The process for this MUST be clearly regulated. Individual employees MUST be informed of the tasks they need to perform for secure deletion and destruction. The process for deleting and destroying storage media MUST also take account of backups when necessary.

The location of destruction facilities on an organisation's premises MUST be clearly regulated. In this regard, it MUST be considered that information and resources may be collected first and only deleted or destroyed later. A central collection point of this kind MUST be protected against unauthorised access.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.16 Theft of Devices, Storage Media and Documents
blocks G 0.19 Disclosure of Sensitive Information