IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
addition, the user himself must take steps to ensure that all data generated
by him (e.g. phone numbers) has been deleted.
- The number memory of the mobile phone will contain details of the phone
numbers called most recently. The numbers of the people who called most
recently will also be held if a caller identification function is available and
has been enabled. These numbers should be cleared prior to a change of
user. It is also possible for call numbers to be stored in telephone
directories both on the mobile phone itself and also on the SIM card.
Personal call numbers should similarly be deleted prior to transferring
possession of the phone. The call numbers which are important for
business communications purposes should be permanently available to all
users.
- Again, short messages, faxes or e-mails may be held on the mobile phone
or the SIM card. These too should be deleted before passing on the
equipment.
Additional controls:
- Are users informed of the rules and security precautions which they are
expected to observe when they are issued with a mobile phone?
- Are users informed of the importance of taking proper care of the mobile
phone when they are issued with it?
- Are issues and returns of mobile phones documented?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000