Merge pull request #1216 from FlowFuse/Encryption-of-Portable-media

SOC2 policy: Encryption of portable and removable media devices
FlowFuse · Oct 6, 2023 · c253a9a · c253a9a
2 parents 65215d3 + 7725bca
commit c253a9a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/handbook/company/security/cryptography.md b/src/handbook/company/security/cryptography.md
@@ -65,6 +65,10 @@ TLS endpoints must score at least an "B" on SSLLabs.com.
 Transmission encryption keys are limited to use for one year and then must be
 regenerated.
 
+### Encryption of portable and removable media devices
+
+It is mandatory for all employees and contractors to use full disk encryption on any portable or removable media device that stores, processes, or transfers company-related information. This includes but is not limited to USB drives, external hard drives, and SD cards.
+
 ## Exceptions
 
 Requests for an exception to this policy must be submitted to the CEO or CTO for