This Control applies to all removable computer media and end user devices managed by the university. The owner of an information resource, or designee, is responsible for ensuring that the measures described in this Control are implemented.

Access to removable computer media and end user devices containing Critical or Confidential data shall be restricted to authorized personnel using physical access controls and safeguards.