S 4.35 Pre-dispatch verification of the data to be transferred

Initiation responsibility: IT Security Management

Implementation responsibility: IT-user

Before the dispatch of data media, a check must be made as to whether the required information - and only this information - can be reconstructed.

Checking transfer to the data medium for correctness can be performed by means of a program which makes a character-by-character comparison of the original file with the transferred one (e.g. with comp on PC's under DOS).

All files on the data medium should be listed (e.g. with dir under DOS or ls under Unix) to ensure that it only contains files meant for the recipient.

Any data stored previously on this data medium must be physically erased (S 4.32 Physical erasure of data carriers before and after usage).

Additional controls:

• Are the data media intended for exchange checked beforehand as to whether the desired information on them can be reconstructed entirely?

• Are the data media intended for exchange normally checked beforehand as to whether only the desired information on them can be reconstructed?