S 4.4 Locking of floppy disk drive

Initiation responsibility: Head of IT Section, IT Security Management

Implementation responsibility: IT-user

By means of special inserts, a floppy disk drive can be locked. In this way it can be achieved that

• the PC or server can no longer be booted from a floppy disk in an uncontrolled way;
• software cannot be installed in an uncontrolled way;
• data can no longer, without authority, be copied on floppy disks.

Therefore, bootable floppy disk drives, in particular, should be locked.

When purchasing disk locks, it should be ensured that as large a number of keys as possible is offered by the manufacturer. This requires organisational steps in the area of key management.

Alternatively, it is possible to dismantle the floppy disk drives.

Additional controls:

• Has it been ensured that floppy disk drives will generally be locked and can be accessed only in case of authorised uses?
• How are the keys safeguarded?
• Has a duplicate set of keys been deposited?
• Have arrangements been made to ensure that different keys are provided for the locks used?