Description

The University restricts the use of removable computer media with information storage capability, in accordance with risk management decisions.

Applicability

  • This Control applies to all removable computer media containing restricted or confidential university data. The data trustee, or designee, is responsible for ensuring that the measures described in this Control are implemented.

Implementation

  • 1

    All removable computer media containing restricted or confidential information shall be encrypted.

  • 2

    All removable computer media containing restricted or confidential information shall have a clearly designated owner, accountable for ensuring all applicable security controls are met.