Guidelines for Data Protection - Media Sanitization & Disposal - Information Security Office - Computing Services

Computing Services › Information Security Office › Governance › Guidelines › Data Protection › Media Sanitization and Disposal

Guidelines for Data Protection - Media Sanitization and Disposal

Media, both electronic and paper format, contains Institutional Data, and must be protected from unauthorized access.

Control Number	Control Name	Public	Private	Restricted
ME-1	Electronic Media is sanitized prior to reuse	Recommended	Required	Required
ME-2	Electronic and paper-based Media is destroyed prior to disposal	Optional	Required	Required
ME-3	Unencrypted media is protected from unauthorized access and accountability is maintained during transport	Optional	Required	Required
ME-4	Mark removable media with the data classification where it may be accessed outside of an authorized group of individuals	Optional	Recommended	Required