Offline Transfer

Go to Terms and Definitions

Offline Transfer moves information or Artifacts between environments without using a direct network connection between the source and destination environments.

Offline Transfer may use:

• Removable storage media
• An intermediary transfer device
• A physically transported storage system
• An approved transfer appliance
• A controlled staging environment
• A manually operated import and export process

Offline Transfer commonly applies when one or both environments are:

• Disconnected Environments
• Air-Gapped Environments
• Subject to restricted network connectivity
• Separated by a security or administrative boundary

An Offline Transfer may include activities such as:

• Selecting the transfer content
• Creating a transfer bundle
• Authorizing the transfer
• Recording the source and destination
• Verifying bundle integrity
• Scanning for prohibited or malicious content
• Physically transporting the transfer medium
• Importing the transfer bundle
• Recording the transfer result

Offline Transfer differs from online transfer:

• Offline Transfer does not use a direct network connection between the source and destination environments
• Online transfer transmits content through a network path connecting the participating environments

The use of removable media alone does not establish a controlled Offline Transfer. Applicable authorization, integrity, inspection, handling, and accountability controls determine whether the transfer satisfies its requirements.

transfer of information or artifacts between environments without a direct network connection between the source and destination environments

Dido Solutions, Inc. and Jackrabbit Consulting, Inc.

Offline does not necessarily mean that every device participating in the transfer lacks network connectivity. The defining characteristic is the absence of a direct network transfer path between the source and destination environments for the transfer being performed.

An Offline Transfer may cross one or more Transfer Boundaries.

Applicable requirements may govern:

• Transfer Authorization
• Permitted content
• Permitted media
• Encryption
• Integrity verification
• Malware scanning
• Chain of custody
• Import and export records
• Media sanitization
• Retention and disposal

An operator exports an approved transfer bundle from a Connected Environment to encrypted removable media, physically carries the media to an Air-Gapped Environment, verifies the bundle integrity, and imports the bundle through an authorized process.