Electronic transfer of material (CL IV–CL II)

Electronic transfer of material includes, for example, telephone, fax, email, instant messaging, and other equivalent data transmission methods operating over a network.

To secure electronic transfer of information, the organization implements the following measures:

• when confidential material is transferred outside approved physically protected areas, the material/traffic is encrypted with a method approved by the authority for the relevant classification level

When confidential material is transferred within physically protected areas:

• a) the communication channel for the relevant classification level is physically protected (for example, cabling that runs entirely within a narrowly defined physically protected area, such as a single room at the relevant protection level), or
• b) the material is protected with lower-level encryption (e. g. HTTPS) based on separate approval from the authority.