GRCLibrary.ai

Procedure

Media Handling and Transport Procedure

To protect information held on physical and digital media from unauthorized disclosure, loss, or tampering during storage, internal movement, external transfer, and disposal. This procedure implements the media controls required by the Data Classification and Handling Standard and the Records Retention and Destruction Standard, ensuring that the method of media protection is always proportionate to the sensitivity classification of the information it contains.

Type
Procedure
Version
1.10.1
Date
2026-10-23
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Operations
Review frequency
Annual and upon material platform or regulatory change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose and scope
  • 2. Governance
  • 3. Media classification
  • 4. Secure transport of physical media
  • 5. Transfer of digital data
  • 6. Media storage
  • 7. Media sanitization and destruction
  • 8. Certificate of destruction
  • 9. Surplus and disposal
  • 10. Metrics
  • 11. Framework alignment

Frameworks it maps to

Related documents