Posts

Showing posts with the label A.8.3.3 Physical Media Transfer

ISO 27001 Annex : A.8.3 Media Handling

Image
ISO 27001 Annex : A.8.3 Media Handling  Its objective is  to Stop unauthorized release, alteration, deletion, or destruction of information contained in the media. A.8.3.1 Management of Removable Media Control-  Procedures shall be implemented for the  management  of removable media in accordance with the classification scheme adopted by the organization. Implementation Guidance-  The following guidelines should be considered for the management of removable media: If not needed, the contents of any reusable media that are to be removed from the  organization  should be made unrecoverable; Where applicable and practicable, authorization should be needed for the removal of media from the company and a record of these removals should be maintained in order to preserve the audit trail; In compliance with manufacturers’ standards, all media should be kept in a secure and safe environment; Where confidentiality or integrity of data is im...