S 5.23 Selecting suitable types of dispatch for data media

Initiation responsibility: Head of IT, IT Security Officer

Implementation responsibility: User

In addition to the implementation information presented in S 2.3 Data media control, the shipping method used to send data media should be selected depending on the potential threats. In terms of availability, the shipping method should be selected so that timely delivery can be guaranteed. The more persons involved in shipping and the longer the periods in which the data media remain unsupervised, the more difficult it is to guarantee the confidentiality and integrity of the data. For this reason, an appropriate shipping method must be selected.

The following shipping methods can be used, for example:

• postal service (offering different types of shipping with different guarantees for the shipping time and level of security),
• courier services,
• personal couriers, and
• personal handover.

For government agencies and companies, it is recommended to create a list containing the different types of data media, their protection requirements, and a suggested shipping method for each type. This makes it easier for the employees to select the shipping method based not only on the best value, but also on the level of security offered. This list should contain a minimum of the following information:

• average shipping time of the shipping method or courier,
• trustworthiness of the shipping method or courier, and
• costs.

Review questions:

• Is the type of data media shipment based on the protection requirements of the information to be sent?