Information Security

Liberty

University 2016

–

All Rights Reserved

Page

1

Removable Media

Policy

Free Use Disclaimer:

This policy was created by or for the

Liberty

University

for the

Internet community. All or parts of this policy can be freely used for your organization.

There is no prior approval required. If you would like to contribute a new policy or

updated version of this policy, please send email to

policy

-

resources@

l

i

berty

.edu.

Things to Consider:

Please consult the Things to Consider FAQ for additional

guidelines and suggestions for personalizing the

Liberty

University

policies

for your

organization.

Last Update Status:

Retired

1.

Overview

Removable media is a

well

-

known sourc

e of malware infections and has

been directly tied to the

loss o

f sensitive information in many

organizations.

2.

Purpose

The purpose of this policy is t

o minimize the risk of loss or ex

posure of sensitive information

maintained by

Liberty Uni

versity

and to reduc

e the risk of acquiring malware

infections on

computers operated by

Liberty

University

.

3.

Scope

This policy covers all computers and servers operating in

Liberty University

.

4.

Policy

Liberty University

staff may only use

Liberty University

removable media in

their work

computers.

Liberty University

removable media may not be

connected to or used in computers

that

are not owned or leased by the

Liberty University

without explicit permis

sion of the

Liberty

University

InfoS

e

c staff. Sensitive information shou

ld be stored on removable media

only when

required in the performance

of your assigned duties or when

providing information required by

other state or fede

ral agencies. When

sensitive information is stored

on removable

media, it

must be

encrypted in accordance with the

Liberty University

Acceptable Encryption Policy

.

Exceptions to this policy may be reque

sted on a case

-

by

-

case basis by

Liberty University

-

exception procedures.

5.

Policy Compliance

5.1

Compliance

Measurement

The

Infosec

team will verify compliance to this policy through various methods, including but

not limited to,

periodic walk

-

thrus, video monitoring,

business tool reports, internal and external

audits, and feedback to the policy owner.

Liberty University 2016 – All Rights Reserved Page 1

Removable Media Policy

Free Use Disclaimer: This policy was created by or for the Liberty University for the

Internet community. All or parts of this policy can be freely used for your organization.

There is no prior approval required. If you would like to contribute a new policy or

updated version of this policy, please send email to [email protected].

Things to Consider: Please consult the Things to Consider FAQ for additional

guidelines and suggestions for personalizing the Liberty University policies for your

organization.

Last Update Status: Retired

1. Overview

Removable media is a well-known source of malware infections and has been directly tied to the

loss of sensitive information in many organizations.

2. Purpose

The purpose of this policy is to minimize the risk of loss or exposure of sensitive information

maintained by Liberty University and to reduce the risk of acquiring malware infections on

computers operated by Liberty University.

3. Scope

This policy covers all computers and servers operating in Liberty University.

4. Policy

Liberty University staff may only use Liberty University removable media in their work

computers. Liberty University removable media may not be connected to or used in computers

that are not owned or leased by the Liberty University without explicit permission of the Liberty

University InfoSec staff. Sensitive information should be stored on removable media only when

required in the performance of your assigned duties or when providing information required by

other state or federal agencies. When sensitive information is stored on removable media, it

must be encrypted in accordance with the Liberty University Acceptable Encryption Policy.

Exceptions to this policy may be requested on a case-by-case basis by Liberty University-

exception procedures.

5. Policy Compliance

5.1 Compliance Measurement

The Infosec team will verify compliance to this policy through various methods, including but

not limited to, periodic walk-thrus, video monitoring, business tool reports, internal and external

audits, and feedback to the policy owner.