[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-7-10":3},{"item":4,"lessons":16,"controls":26,"related":40},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-7-10","Annex A 7.10","Storage media",2,"International Organization for Standardization (ISO) and IEC","**What it asks for.** Storage media should be managed through their lifecycle of acquisition, use, transport and disposal in line with the organisation's classification scheme and handling requirements.\n\n**In practice.** The organisation decides where removable media are allowed at all and enforces that technically, for example by blocking USB storage on most endpoints. Approved media holding sensitive information are encrypted, tracked and stored securely. Transport uses trusted couriers or encrypted containers, and disposal uses secure erasure or physical destruction with a certificate when a third party is used. Evidence includes the media handling procedure, device control settings, asset registers for media and destruction certificates.\n\n**Common gaps.** Media inside returned or recycled equipment, such as disks in printers or leased laptops, is often overlooked. Organisations also tend to lose track of backup tapes and drives once they leave the data centre.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22],{"slug":19,"title":20,"published_at":21},"spanish-council-fined-for-improper-disposal-of-exam-documents-containing-personal-data","Spanish Council Fined for Improper Disposal of Exam Documents Containing Personal Data","2026-08-26T16:21:39.887+00:00",{"slug":23,"title":24,"published_at":25},"usb-worm-hijacks-crypto-wallets-via-windows-shortcut-files","USB Worm Hijacks Crypto Wallets via Windows Shortcut Files","2026-06-18T18:21:07.648+00:00",[27,31,36],{"slug":28,"name":29,"problem":30,"stories":9},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",{"slug":32,"name":33,"problem":34,"stories":35},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",1,{"slug":37,"name":38,"problem":39,"stories":35},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[41,46,51,55,59,63,67,70],{"family":42,"item":43,"code":44,"title":45,"together":9},"cis","3","Control 3","Data Protection",{"family":47,"item":48,"code":49,"title":50,"together":9},"gdpr","32","Article 32","Security of processing",{"family":47,"item":52,"code":53,"title":54,"together":35},"24","Article 24","Responsibility of the controller",{"family":47,"item":56,"code":57,"title":58,"together":35},"5","Article 5(1)(f)","Principles relating to processing of personal data",{"family":47,"item":60,"code":61,"title":62,"together":35},"overview","GDPR","General Data Protection Regulation (GDPR)",{"family":5,"item":64,"code":65,"title":66,"together":35},"a-8-7","Annex A 8.7","ISO\u002FIEC 27001:2022 Annex A 8.7: Protection against malware",{"family":68,"item":60,"code":69,"title":69,"together":35},"itil","ITIL",{"family":71,"item":72,"code":73,"title":74,"together":35},"nist-800-53","ac-19","AC-19","Access Control for Mobile Devices"]