+SYS.4.1.A17 Protection of Payloads and Metadata (S)

SYS.4.1.A17 Protection of Payloads and Metadata (S)

Payload data and metadata such as print jobs and scan files SHOULD only be stored on devices for as short a time as possible. Data SHOULD be deleted automatically after a predefined amount of time. File servers on such devices and functions such as “scan to device memory” SHOULD be disabled by the IT Operation Department. The protocols and functions required for this SHOULD be blocked whenever possible.

In general, the IT Operation Department SHOULD ensure that no metadata is visible to unauthorised parties. Organisations SHOULD regulate how printouts with metadata are to be passed on to third parties.

1. Prezentare generală

Titlu Standard

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe
Sursă Cerință

3. Reglementări asociate

Reglementări
Sursă Reglementare

Tichete legate

Legături
Tip de legătură Tichet
blocks G 0.19 Disclosure of Sensitive Information