Which requirement requires management approval for any and all media moved from a secured area?

Which requirement requires management approval for any and all media moved from a secured area?

• A. Access to media is unrestricted.
• B. Media must be inventoried annually.
• C. Management must approve any and all media moved from a secured area.
• D. Encryption is required for all media in transit.

Answer: (C)

The key idea is strong control over moving sensitive media out of protected spaces. Requiring management approval for any and all media moved from a secured area creates formal authorization, accountability, and oversight before the media leaves the restricted zone, helping prevent intentional or accidental data exfiltration. The other options don’t establish this movement-level control: unrestricted access would remove any barrier to taking media out; annual inventory helps track assets but doesn’t require approval for movement; encryption in transit protects data while it’s being moved but doesn’t enforce who can authorize the move from the secured area.

The key idea is strong control over moving sensitive media out of protected spaces. Requiring management approval for any and all media moved from a secured area creates formal authorization, accountability, and oversight before the media leaves the restricted zone, helping prevent intentional or accidental data exfiltration. The other options don’t establish this movement-level control: unrestricted access would remove any barrier to taking media out; annual inventory helps track assets but doesn’t require approval for movement; encryption in transit protects data while it’s being moved but doesn’t enforce who can authorize the move from the secured area.