Topic

Reclassifying media

Applicable to

all

History

Priority

must

Apr 2021

Any media connected to a system with a higher sensitivity or classification than the media is reclassified to the higher sensitivity or classification, unless the media is read-only or the system has a mechanism through which read-only access can be ensured.

Security control 0325 was simplified noting that using a read-only device is one mechanism through which read-only access can be ensured.

Mar 2021

Any media connected to a system is classified as the same sensitivity or classification as the system, unless the media is read-only, the media is inserted into a read-only device or the system has a mechanism through which read-only access can be ensured.

Mar 2019

Any media connected to a system is classified as the same sensitivity or classification as the system, unless the media is read-only, the media is inserted into a read-only device or the system has a mechanism through which read-only access can be ensured.

Security control 0325 was modified to fix a grammar error (i.e. to replace ‘assured’ with ‘ensured’).

Feb 2019

Any media connected to a system is classified as the same sensitivity or classification as the system, unless the media is read-only, the media is inserted into a read-only device or the system has a mechanism through which read-only access can be assured.

2015

Agencies must classify any media connected to a system the same sensitivity or classificationas the system, unless either:• the media is read–only• the media is inserted into a read–only device• the system has a mechanism through which read–only access can be assured.

2010

Agencies must classify any media connected to a system as the system classification unless either:• the media is read-only• the media is inserted into a read-only device• the system has a mechanism through which read-only access can be assured.