Media Handling Policy

Objective:

To Stop unauthorized release, alteration, deletion, or destruction of information contained in the media. To ensure secure disposal of media to reduce the possibility of leakage of sensitive information to unauthorized persons.

Asset Inventory:

An Asset inventory of storage devices is maintained and updated

Reusable Media:

Media that is going to be reused will be securely and comprehensively erased such that any pre-existing data is unrecoverable.

Media Retention/ Secure Storage:

Media that is retained for secure storage or prior to destruction will be:

• Kept on preservable Media
• Stored in multiple locations where applicable
• Stored according to manufacturer tolerances

Removable Media Encryption:

Any removable media authorized for company use will:

• Require Encryption
• Be provided by IT and inventoried
• Be provided on when a valid business use case is determined

Media Destruction:

Media that is retired will be:

• Stored securely on site
• Labeled and Documented in Asset inventory
• Periodically be destroyed by an authorized/certified vendor