Introduction
This policy is part of the medDigital ISMS and must be fully complied with.
This policy exists to prevent unauthorized disclosure, modification, removal or destruction of information
stored on media.
Media
All media, removable and fixed, in medDigital is encrypted and this encryption is enforced using technical
controls that cannot be overridden. No special measures are therefore required when handling media.
Disposal
Before disposing of removable media, all files should be deleted.
Before disposing of a laptop/desktop, all drives should be zero-fill formatted.
Under the shared responsibility model,
Amazon is responsible for the physical disks of servers.
Physical transfer
All removable media in medDigital is encrypted with Bitlocker. This control is enforced technically and
cannot be overridden.
Employees must not physically transfer the decryption key with the media. The key must be kept separate
at all times and be sent separately.