This Media Protection Policy establishes ways for managing risks from media access, storage, and transport. It allows for the media protection program to implement it into their workforce so employees are more aware of risks of data loss. This policy defines what the enterprise must do, how the enterprise must do it, and it includes the best recommendations to customize the template to individual enterprise requirements.
Risks Addressed by Policy:
- Without media protection mechanisms, the potential exists for information assets to be exposed to an unnecessarily high level of risk.
- When information is taken out of the information system, it is at a higher risk of being breached without a media protection policy in place.