Requirement
Cybersecurity requirements for usage of information and data media within the CSP shall cover, at minimum, the following:
Sub-Controls
2-17-P-3-1
Requirement: Enforcement of sanitization of media, prior to disposal or reuse.
2-17-P-3-2
Requirement: Using secure means when disposing of media.
2-17-P-3-3
Requirement: Provision to maintain confidentiality and integrity of data on removable media.
2-17-P-3-4
Requirement: Human readable labelling of media, to explain its classification and the sensitivity of the information it contains.
2-17-P-3-5
Requirement: Controlled and physically secure storage of removable media.
2-17-P-3-6
Requirement: Restriction and control of usage of portable media inside the Cloud Technology Stack.
