Description

The University restricts the use of removable computer media and end user devices with information storage capability, in accordance with risk management decisions.

Applicability

  • This Control applies to all removable computer media and end user devices containing Critical or Confidential university data. The data trustee, or designee, is responsible for ensuring that the measures described in this Control are implemented.

Implementation

  • 1

    All removable computer media and end user devices containing Critical or Confidential data shall be encrypted.

  • 2

    All removable computer media and end user devices containing Critical or Confidential data shall have a clearly designated owner, accountable for ensuring all applicable security controls are met.