The directives for managing detachable storage media include establishing a policy for their use, keeping records of their removal, storing them in a secure environment, adopting cryptographic tools to safeguard the data, transferring data to new storage media, and securely disposing of them. When transporting something used as physical storage, organizations should use security practices. The reuse and disposal of storage media should lessen the risks of leaking confidential data, and organizations should perform a review to cover damaged devices with vulnerable information to conclude whether they should be disposed of. See also Control 7.14.
Conformance1
Tools for conforming to standards, goals and processes
