Scribd Logo
Upload

Welcome to Scribd!

  • 37 views

    Removable Media Policy

    Uploaded by

    Rashid Kamal
    This policy outlines guidelines for using removable media in order to minimize the risk of losing sensitive information or acquiring malware. It specifies that only company-provided removable media can be used on company computers without special permission. Any sensitive data stored on removable media must be encrypted. Exceptions to the policy require approval. Non-compliance may result in disciplinary action up to termination.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Removable Media Policy

    Uploaded by

    Rashid Kamal
    37 views2 pages
    This policy outlines guidelines for using removable media in order to minimize the risk of losing sensitive information or acquiring malware. It specifies that only company-provided removable media can be used on company computers without special permission. Any sensitive data stored on removable media must be encrypted. Exceptions to the policy require approval. Non-compliance may result in disciplinary action up to termination.

    Original Title

    removable_media_policy

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This policy outlines guidelines for using removable media in order to minimize the risk of losing sensitive information or acquiring malware. It specifies that only company-provided removable media can be used on company computers without special permission. Any sensitive data stored on removable media must be encrypted. Exceptions to the policy require approval. Non-compliance may result in disciplinary action up to termination.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    37 views2 pages

    Removable Media Policy

    Uploaded by

    Rashid Kamal
    This policy outlines guidelines for using removable media in order to minimize the risk of losing sensitive information or acquiring malware. It specifies that only company-provided removable media can be used on company computers without special permission. Any sensitive data stored on removable media must be encrypted. Exceptions to the policy require approval. Non-compliance may result in disciplinary action up to termination.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 2

    Consensus Policy Resource Community

    Removable Media Policy


    Free Use Disclaimer: This policy was created by or for the SANS Institute for the
    Internet community. All or parts of this policy can be freely used for your organization.
    There is no prior approval required. If you would like to contribute a new policy or
    updated version of this policy, please send email to policy-resources@sans.org.

    Things to Consider: Please consult the Things to Consider FAQ for additional
    guidelines and suggestions for personalizing the SANS policies for your organization.

    Last Update Status: Retired

    1. Overview
    Removable media is a well-known source of malware infections and has been directly tied to the
    loss of sensitive information in many organizations.

    2. Purpose
    The purpose of this policy is to minimize the risk of loss or exposure of sensitive information
    maintained by <Company Name> and to reduce the risk of acquiring malware infections on
    computers operated by <Company Name>.

    3. Scope
    This policy covers all computers and servers operating in <Company Name>.

    4. Policy
    <Company Name> staff may only use <Company Name> removable media in their work
    computers. <Company Name>removable media may not be connected to or used in computers
    that are not owned or leased by the <Company Name> without explicit permission of the
    <Company Name> InfoSec staff. Sensitive information should be stored on removable media
    only when required in the performance of your assigned duties or when providing information
    required by other state or federal agencies. When sensitive information is stored on removable
    media, it must be encrypted in accordance with the <Company Name> Acceptable Encryption
    Policy.

    Exceptions to this policy may be requested on a case-by-case basis by <Company Name>-


    exception procedures.

    5. Policy Compliance
    5.1 Compliance Measurement

    SANS Institute 2013 – All Rights Reserved Page 1


    Consensus Policy Resource Community

    The Infosec team will verify compliance to this policy through various methods, including but
    not limited to, periodic walk-thrus, video monitoring, business tool reports, internal and external
    audits, and feedback to the policy owner.

    5.2 Exceptions
    Any exception to the policy must be approved by the Infosec team in advance.

    5.3 Non-Compliance
    An employee found to have violated this policy may be subject to disciplinary action, up to and
    including termination of employment.

    6 Related Standards, Policies and Processes


    • Acceptable Encryption Policy

    7 Definitions and Terms


    The following definition and terms can be found in the SANS Glossary located at:
    https://www.sans.org/security-resources/glossary-of-terms/

    • Encryption
    • Malware
    • Removable Media
    • Sensitive Information

    8 Revision History

    Date of Change Responsible Summary of Change

    Dec 2013 SANS Policy Team Converted to new format and retired.

    SANS Institute 2013 – All Rights Reserved Page 2

    You might also like

    pFad - Phonifier reborn

    Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

    Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


    Alternative Proxies:

    Alternative Proxy

    pFad Proxy

    pFad v3 Proxy

    pFad v4 Proxy