of their normal e-mails. Emails carrying information classified at C2 and above SHALL NOT be automatically forwarded outside to the Agency’s systems. SU 11. *When dealing with external parties, Agencies ensure that external recipients/originators understand and agree on the usage of classified data as defined in section C- 3, Information Exchange [IE]. 8. Media Security [MS] 8.1. Policy Objectives The objective of this policy is to help Agencies to define how media can be classified, labelled and registered to assist in properly identifying and accounting for it. The policy considers the whole lifecycle of the media from usage, repair, sanitisation, and destruction to disposal. 8.2. Policy & Baseline Controls - Media Classification and Labelling In order to comply with this policy, Agencies MUST ensure: MS 1. Hardware containing media is classified at or above the classification of the information contained on the media MS 2. Non-volatile media is classified to the highest classification of information stored on it MS 3. *Volatile media that has a continuous power supply is classified to the highest classification of information stored on it while the power is on. Volatile media may be treated as classified C1 information once the power is removed from the media. MS 4. Storage media is reclassified if: a. information copied onto that media is of a high classification, b. information contained on that media is subject to a classification upgrade MS 5. Media holding classified information may be declassified after: a. the information on the media has been declassified by the originator, or b. the media has been sanitized in accordance with section C- 8.3, Policy & Baseline Controls Media Sanitization MS 6. If the storage media cannot be sanitized, then it cannot be declassified and MUST be destroyed. MS 7. *The classification of all media is readily visually identifiable. Agencies SHOULD achieve this by labelling media with a protective marking that states the maximum classification as specified in section B-4, Data Labelling [DL] MS 8. Classification of all media is easily visually identifiable. When using non-textual representations for classification markings due to operational security, Agencies SHALL document the labelling scheme and train staff members appropriately. 8.3. Policy & Baseline Controls - Media Sanitization In order to comply with this policy, Agencies MUST ensure: MS 9. *They document procedures for the sanitisation of media, which are regularly tested. MS 10. All media types which contain information classified as C1 or above are destroyed prior to disposal: a. microfiche & microfilm b. optical discs c. printer ribbons and the impact surface facing the platen d. programmable read-only memory e. read-only memory f. faulty media that cannot be successfully sanitised. MS 11. 39 Volatile media is sanitised by: NATIONAL INFORMATION ASSURANCE MANUAL