Article 10 Data media and asset control

Removable media containing data shall be protected against unauthorised access, misuse or corruption and its readability shall be ensured during the whole lifetime of the data.

Media shall be disposed securely and safely when no longer required, in accordance with the detailed procedures to be set out in the Security Policy.

Inventories shall ensure that information on the storage location, the applicable retention period and access authorisations are available.

All important assets of the central VIS and the communication infrastructure shall be identified, so that they can be protected in accordance with their importance. An up-to-date register of relevant IT equipment shall be kept.

An up-to-date documentation of the central VIS and the communication infrastructure shall be available. Such documentation must be protected against unauthorised access.