ISO/IEC 27001 Control 5.14: Information transfer

Control

Information transfer rules, procedures, or agreements should be in place for all types of transfer facilities within the organization and between the organization and other parties.

Necessity of MidPoint

MidPoint is optional for implementation of this control.

Implementation of this control without midPoint is feasible. However, midPoint provides considerable advantages for implementation of this control, making the implementation more efficient and reliable.

Implementation Overview

MidPoint can use classifications and policy rules to limit and partially control information transfer.

Implementation Details

Policy rules can prohibit access to internal information to external users, or it may require appropriate non-disclosure agreements in place (in a form of clearance).

Documentation

Version Title Description
Development Information Classification and Clearances Description of an idea for limiting access to internal information using classification scheme
4.8 Information Classification and Clearances Description of an idea for limiting access to internal information using classification scheme
Was this page helpful?
YES NO
Thanks for your feedback