Portable Media
Portable Media Security Standard
Portable media such as USB keys, flash memory, CDs/DVDs, etc. are a crucial part of daily business. However, portable media is easily lost or stolen and may cause a security breach.
Because portable media can be stolen or compromised easily, users must take precautions when using it to transfer or store Confidential information. We strongyly discourage placing Private Information on portable media.
Approved Portable Media (updated 3/15/2012)
When handling RIT Confidential information, you should use only portable media that provides an approved encryption level (the RIT Information Security Office requires 128-bit or 256-bit AES encryption).
USB Memory/flash drives
Recommended
- IronKey
- Stealth MXP™ (biometric capable)
- Stealth MXP™ Passport
- Apricorn Aegis Secure Key
Acceptable
- Lexar JumpDrive Lightning
- Lexar JumpDrive Secure 2 Plus
- Kanguru Defender
- Kanguru Defender Pro
- Kanguru Bio AES
- KanguruMicro Drive AES
- Kingston Data Traveler BlackBox
- Kingston Data Traveler Vault – Privacy Edition
- McAfee Zero-footprint Bio FIPS
- SanDisk Cruzer Enterprise
Secure Option for External Backups
- MXI Outbacker MXP Bio (External HDD)
- Apricorn Aegis Padlock Pro
Additional Solutions
TrueCrypt Software using AES (An additional option is to use XTS cascade mode - AES-XTS, Serpent-XTS, TwoFish-XTS. Cascading is optional in any combination.)
Unacceptable
- USB memory that doesn't include encryption
Encryption of CD’s, DVD’s, Removable Hard Drives, and Other Portable Media
Please contact Paul Lepkowski, RIT Security Engineer, for recommended encryption methods.
3rd Party Encryption Products
The RIT Information Security Office requires 128-bit or 256-bit AES encryption to protect RIT Confidential information when transferred or stored on portable media.
Media Disposal Recommendations
|
Media |
Disposal Method |
|
Paper |
Use a shredder. Crosscut is preferred over a strip shredder. |
|
CD, DVD, diskette, etc. |
Use the media shredder (located at the ITS HelpDesk, 7B-1113). |
|
Hard Drives |
If the hard drive is to be reused, contact your support organization for recommendations for secure erasure. If the hard drive is damaged or will not be reused, render the hard drive unreadable by using the degausser (located at the ITS HelpDesk, 7B-1113). |
|
Tapes |
Use the degausser (located at the ITS HelpDesk, 7B-1113). |
|
Other |
Use an industry standard means of secure disposal. |
