Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleDoes your organisation run any applications or systems that are no longer supported and no longer receive security updates?

Does your organisation run any applications or systems that are no longer supported and no longer receive security updates?

No.

More information: https://commonplace.atlassian.net/l/cp/T0a1NJT5

Expand
titleDoes your organisation ensure that all used digital media (that may have stored data) is disposed of securely and are certificates of destruction obtained?

Does your organisation ensure that all used digital media (that may have stored data) is disposed of securely and are certificates of destruction obtained?

Media storage devices used to store customer data are classified by AWS as critical and treated accordingly, as high impact, throughout their life-cycles. AWS has exacting standards on how to install, service, and eventually destroy the devices when they are no longer useful. When a storage device has reached the end of its useful life, AWS decommissions media using techniques detailed in NIST 800-88. Media that stored customer data is not removed from AWS control until it has been securely decommissioned.

...