S 2.44 Secure packaging of data media

Initiation responsibility: IT Security Management

Implementation responsibility: IT users, Mailroom

In addition to the implementations stated in measure S 2.3 (Data media control), the packaging of the data media should be designed to reveal manipulations.

Possible measures in this respect include:

• Sealed envelopes

• Lead-sealed containers or

• Envelopes sealed with an adhesive film and then marked irregularly several times with non-soluble ink.

If the data medium has a write protection facility (slides for disks, rings for tapes), this should be used. If manipulation detection of the information on the data medium are established, encryption or checksum procedures should be implemented (c.f. 4.34 Using encryption, checksums or digital signatures).

Additional controls:

• Are appropriate containers stipulated and available for the secure transport of data media?

• Do these containers allow recipients to check whether the contents have been manipulated?