Removable Media Policy of Baghdad University

1. Overview
Removable media is a well-known source of malware infections and has been directly tied to the
loss of sensitive information in many organizations.

2. Purpose
The purpose of this policy is to minimize the risk of loss or exposure of sensitive information
maintained by Baghdad University and to reduce the risk of acquiring malware infections on
computers operated by Baghdad University.

3. Scope
This policy covers all computers and servers operating in Baghdad University.

4. Policy Statements
4.1. The use of removable media is not prohibited within Baghdad University;
it is in fact an essential part of everyday business.
4.2. The use of removable media to transport non-sensitive data can be done
on standard devices
4.3. Regularly updated Anti-Virus software should be present on all machines
from which the data is taken from and machines on which the data is to be
loaded.
4.4 When removable media is used to transport sensitive data, the data on
the device must be encrypted to a recommended encryption standard (AES256).
4.5. Mobile devices and/or removable storage containing sensitive or highly
sensitive data should not be sent off site without prior agreement. IT
Services should be consulted to ensure the level of security is appropriate for
the type of data being transferred. For example, database dumps.
4.6. If highly sensitive data is required to be transported via removable
media please seek advice from IT Services.
4.7. Removable media used to store sensitive and highly sensitive data shall
only be encrypted in accordance with the Baghdad University Acceptable
Encryption Policy

Page 1

5. Enforcement
any person found to be in violation of this policy will be subject to
appropriate disciplinary action as defined by current University policy or
contract.
Exceptions to this policy may be requested on a case-by-case basis by - exception procedures.

6 Related Standards, Policies and Processes

Acceptable Encryption Policy

Revision History

Date of
Change

Responsible

Summary of Change

Mar 2015

BU Policy Team

Updated and converted to new format.

Page 2