Policies, procedures and standards should be established and maintained to protect information and physical media in transit, and should be referenced in such transfer agreements. The information security content of any agreement should reflect the sensitivity of the business information involved. Agreements may be electronic or manual, and may take the form of formal contracts. For confidential information, the specific mechanisms used for the transfer of such information should be consistent for all organizations and types of agreements. (NL ISO/IEC, 2015) Lebanese National Security Policy Guidelines v1.7 Page 31 |