S 2.43 Adequate labelling of data media for dispatch

Initiation responsibility: Head of IT Section, IT Security Management

Implementation responsibility: IT-user

In addition to the measures stated in S 2.3 (Data media control), adequate labelling of data media to be exchanged should include clear identification of the sender and (all) recipients. The labelling must allow the recipient to clearly recognise the contents of the data medium. In the case of confidential information, however, it is important that unauthorised persons be unable to interpret the labelling.

In addition, the data media should be labelled with the parameters necessary for reading. When transferring magnetic tapes, for instance, the labelling should include the identifier, speed (e.g. 800 bpi), record length, block length and record format (e.g. 132 bytes, 13200 bytes, fixed).

The date of dispatch as well as version numbers or key features can also prove useful.

Additional controls:

• Are there regulations on the labelling of data media destined for transfer?

• Is adherence to labelling regulations checked sporadically?