S 2.112 Regulation of the transport of files and data media between home workstations and institutions

Initiation responsibility: Head of IT Section, IT Security management

Implementation responsibility: Staff members

To allow the safe and reliable transport of files and data media between the workstation at home and the institution, regulations concerning the nature of this exchange need to be drawn up. At least the following issues should be settled here:

• Determination of which files and data media may be transported using which means (mail, courier, parcel service etc.). (In this context, refer to S 5.23 Selecting Suitable Types of Dispatch for Data Media.)

• Determination of the security measures required during transport, including:

- Locked container

- Padded envelope

- Registered mail

- Certified mail

- Covering letter

- Seals

• Determination of the files and data media which must only be transported on one's person

As papers, documents and portfolio files are often unique - i.e. no copies of them exist - the selection of a suitable means of exchanging these items must include a consideration of the consequential damage which would arise from their loss. In contrast, data media can be backed up before dispatch.

Additional controls:

• Have the concerned employees been informed about how files and data media are to be transported?