Requirement
[A: M | B: M] Cybersecurity requirements for protecting and handling the entity's data and information per relevant legislative and regulatory requirements must be defined, documented and approved, covering at minimum:
Sub-Controls
2-7-1-1
Requirement: [A: M | B: R] Use of Data Leakage Prevention technologies and Rights Management technologies.
2-7-1-2
Requirement: [A: M | B: R] Use of a brand protection service to protect the entity's identity from impersonation (Brand Protection).
2-7-1-3
Requirement: [A: M | B: M] Secure use of printers, scanners and photocopiers.
2-7-1-4
Requirement: [A: M | B: M] Secure destruction and re-use of assets (including paper documents and storage media).
