17.3.16 Copying

Users and Document Management Administrators [Link] shall keep the number of copies of confidential information, in any combinations of media or format, at the minimum required. Where necessary, they shall also keep a record of their distribution. Users shall keep all hard copies or storage media in physically secured storage, such as a locked drawer or filing cabinet. Users shall securely dispose of copies when they are no longer required.

Where information is replicated, the original classification is inherited. Users must evaluate the requirements of integrity and availability against security when creating or replicating information.