IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
S 2.112 Regulation of the transport of files and data
media between home workstations and
institutions
Initiation responsibility: Head of IT Section, IT Security management
Implementation responsibility: Staff members
To allow the safe and reliable transport of files and data media between the
workstation at home and the institution, regulations concerning the nature of
this exchange need to be drawn up. At least the following issues should be
settled here:
- Determination of which files and data media may be transported using
which means (mail, courier, parcel service etc.). (In this context, refer to S
5.23 Selecting Suitable Types of Dispatch for Data Media.)
- Determination of the security measures required during transport,
including:
- Locked container
- Padded envelope
- Registered mail
- Certified mail
- Covering letter
- Seals
- Determination of the files and data media which must only be transported
on one’s person
As papers, documents and portfolio files are often unique - i.e. no copies of
them exist - the selection of a suitable means of exchanging these items must
include a consideration of the consequential damage which would arise from
their loss. In contrast, data media can be backed up before dispatch.
Additional controls:
- Have the concerned employees been informed about how files and data
media are to be transported?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000