The key in deciding how to manage media in an organization is to first consider the information, then the media type. The security categorization of the information, along with internal environmental factors, should drive the decisions on how to deal with the media. Again, the key is to first think in terms of information confidentiality, then by media type. In organizations, information exists that is not associated with any categorized system. This information is often hard copy internal communications such as memoranda, white papers, and presentations. Sometimes this information may be considered sensitive. Examples may.
