A clear definition of use will eliminate a significant amount of thrashing on both sides of the connection. Another facet of the media question regards backup media and equipment repair. The guidelines must establish clear procedures for the storage and disposition of backup media. The same considerations must be extended to system media that might contain sensitive data. Such information must be cleared from the hard drive prior to being given to a technician for repair.
Access control is essential to the implementation of security standards.
Access control should be defined by a cooperative effort of the standards development organizations. Finally, the standard must not be technology specific. Thank you for this opportunity to address the subcommittee. I will be available to answer questions at your convenience.