+CON.7.A10 Encryption of Portable IT Systems and Storage Media [User, IT Operation Department] (B)

CON.7.A10 Encryption of Portable IT Systems and Storage Media [User, IT Operation Department] (B)

To ensure that sensitive information cannot be accessed by unauthorised third parties, employees MUST ensure that all sensitive information is secured in accordance with the applicable internal policies before travelling. Mobile storage media and clients SHOULD be encrypted by the user or the IT Operation Department prior to travel. The cryptographic keys MUST be stored separately from encrypted devices. When encrypting data, the legal regulations of the destination country SHOULD be observed. In particular, country-specific laws on the issuance of passwords and the decryption of data SHOULD be considered.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.36 Identity theft
blocks G 0.46 Loss of Integrity of Sensitive Information