25.2.6 Storage and security

The MRCC Office should put in place appropriate measures to protect the material against loss, unauthorised access, use, modification or disclosure by:

a)ensuring the classification is clearly marked on the material

b)restricting access to relevant personnel on a 'need to know' basis

c)marking all envelopes used to transmit this material with 'TO BE OPENED BY ADDRESSEE ONLY'

d)storing the material in an approved security container

e)storing material separately from other files

f)maintaining a log of all personnel accessing, using or removing the material, in order to establish an audit trail.