12.17 Controlled Media Register

In order to maintain a robust data audit trail, all devices should bear a manufacturer’s serial number or tamper evident Unique Reference Number which shall be recorded in a dedicated register showing date registered, date released and data release reference.

This recommendation applies to, but is not limited to, the following: