Definitions
Removeable Media
“Removable media” includes all devices and data media that can have data written to them and subsequently be removed easily from the host computer, thus conferring portability on the data therein.
Directive
Users having a justifiable business reason for copying data to removable media and taking the media offsite must have their manager’s written approval for using or transporting the removable media offsite. The only removable media that may be used or connected to company equipment or networks are media that have been approved for use by IT Technical Support and either purchased by the company or approved for transfer into the ownership of the company. Removable media must be handled, protected, reallocated and decommissioned as directed in the Procedures section below.
Purpose
The purpose of this directive is to ensure that, with regard to the use of company-approved removable data storage devices:
- Data security and integrity are maintained.
- Risks to the stability of company IT systems and networks are kept to a minimum.
- The risk of exposing sensitive company data is minimized while the removable media is offsite.
