FFIEC IT Examination Handbook
Information Security booklet (September 2016) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook IS-II.C.13(d): II.C.13(d) Transit of Physical Media (Information Security)

What does IS-II.C.13(d) require?

Policies keep physical media holding sensitive information, including backup tapes, secure in transit to off-site storage or third parties through contractual risk-based controls, restrictions on carriers, courier identity verification, protective packaging, encryption of the media, shipment tracking for early warning of loss, security reviews or reports of receiving companies and nondisclosure agreements with couriers and third parties.

Maintained by Gerard BlokdykControl text last updated

Other controls in Information Security booklet (September 2016) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll FFIEC IT Examination Handbook controls