Data handling requirements
Ensuring the confidentiality, integrity, and availability of requirements during various states that any data will pass through requires the secure handling of such data. Appropriate policies and procedures should be established for handling sensitive data.
Handling sensitive information
Sensitive data such as confidential files need special care. Some of the best practices to handle sensitive information include the following:
Secure disposal of media: Media containing sensitive data has to be disposed off in a secure manner. Shredding in case of paper documents and pulverizing in case of digital media are some of the methods used in media disposal.
Labelling: Appropriate labelling is important for sensitive data without disclosing the type of content.
Access restrictions: The need to know principle is to be adopted while designing and implementing access restrictions to sensitive data.
Formal records of authorized recipients of data: Recipients who are authorized...
