Question

A hospital's radiology department burns patient MRI images and reports onto DVDs and ships them via courier to a partner clinic for a second opinion. The security team is defining handling requirements for this workflow. Which control most directly addresses the classification level of the data while it is being physically transported on the DVDs?

Accepted Answer

Apply external and internal media labels reflecting the classification and encrypt the DVD contents before shipment

Answer

Require the courier to sign a non-disclosure agreement covering the delivery route

Answer

Configure full-disk encryption on the radiology workstation that authored the DVDs

Answer

Deploy a network DLP appliance to inspect traffic leaving the radiology subnet