ISM-0326

History

2008
Agencies intending to classify media below the classification of the system to which it is connected or inserted into should ensure that: a. the media is read-only b. the media is inserted into a read-only device c. the system has a mechanism through which read-only access can be assured or d. an accredited process is used to determine the classification.