Topic

Removable media usage policy

Applicable to

all

History

Priority

should

Dec 2022

A removable media usage policy is developed, implemented and maintained.

Existing controls relating to the development and implementation of cyber security documentation were amended to ensure documentation is maintained throughout its lifetime.

Aug 2019

A removable media usage policy is developed and implemented.

Security control 1359 was modified to focus on the use of removable media by users.

Jul 2019

A removable media security policy is developed and implemented that includes: § details of the removable media authority within the organisation § types of media permitted within the organisation § processes for media registration and auditing § processes for media classification and labelling § processes for the use of media for data transfers § processes for the sanitisation/destruction and disposal of media.

Apr 2019

A removable media security policy is developed and implemented that includes: § details of the removable media authority within the organisation § types of media permitted within the organisation § processes for media registration and auditing § processes for media classification and labelling § processes for the use of media for data transfers § processes for the sanitisation/destruction and disposal of media.

Security control 1359 was reworded.

Mar 2019

A removable media policy is developed and implemented that includes: § details of the removable media authority within the organisation § types of media permitted within the organisation § processes for media registration and auditing § processes for media classification and labelling § processes for the use of media § processes for the sanitisation/destruction and disposal of media.

2015

Agencies should have a removable media policy that includes:• details of the authority for removable media within an agency• media registration and accounting requirements• media classification requirements• the types of media permitted within the agency• explicit cases where removable media is approved for use• requirements for the use of media• requirements for disposal of media.