Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Removable media

Subject: Re: Removable media
Date: Fri, 30 Nov 2007 11:24:49 -0600
first of all encryption has to be implemented.
Then some type of application/device control system. Lumension
Sanctuary comes to mind.

NIST has some policies on encryption standards.




On Nov 30, 2007 8:27 AM, Worrell, Brian <BWorrell@isdh.in.gov> wrote:
 Hello,

I am curious if anyone has a policy or can reference a policy, about
removable media. After all the losses of backup tapes, CD's and USB
flash drives being discussed in the media, this topic has become more
important than I think it has been in the past.

What are some of you doing to track media with sensitive information,
such as ePHI or SSN, on it, or how are you tracking if someone copies
information to a removable media device?



Thank you,

Brian Worrell
Information Security Manager and Security Officer
Office of HIPAA Compliance
Indiana State Department of Health
2 North Meridian Street
Indianapolis, IN  46204
o: (317) 233-4945


<Prev in Thread] Current Thread [Next in Thread>