Using Reflex Disknet Pro to Aid Compliance with BS 7799 & ISO/IEC ...

3.5. Media handling and security [8.6]
Clause 8.6 asks that all media should be controlled and protected from theft and
unauthorised access.
3.6. Management of removable media [8.6.1 (a) (b)]
There should be procedures for the management of removable computer media.
RDP was designed specifically to offer this type of management control. All media
must be authorised for use which will necessitate a content scan using either a third
party anti-virus product or RDP’s own content scanner. It may indeed require both of
these scans to be performed. Once authorised for use, an audit trail can be kept of
all files stored on the device. Fig. 6 shows one event from a removable media log
file.
Fig. 6
You will note that there is a unique ID number, time, operation, host name (PC),
process, file name, and user name recorded.
Protecting the media’s contents from unauthorised access is achieved by making the
policy dictate that all removable media should be encrypted, as discussed in section
2.
© Reflex Magnetics Ltd 12