Definitions
Media
Physical items upon which information is stored, encompassing both digital formats like hard drives, flash drives, and optical disks, and non-digital formats such as paper printouts.
Downgrading
Media downgrading refers to the systematic reduction of sensitivity or classification of system media—digital or non-digital—prior to its release outside the organization.
Directive (MP-1 Media Protection)
GNB shall establish, implement, and maintain a formal Media Protection Directive to ensure that organizational information stored on any form of media—digital, physical, portable, or removable—is properly protected throughout its lifecycle.
Purpose
This directive establishes the governance foundation necessary to protect organizational information against unauthorized access, disclosure, alteration, or loss that may occur due to improper media handling.
The objective of the Media Protection Directive is to ensure that a standardized secure approach and access-control is used for protection of digital and paper media when storing sensitive business information.
