Australian Information Security Manual ISM-0323: Media is classified to the highest sensitivity or classification of data it stores, unless

Media is classified to the highest sensitivity or classification of data it stores, unless the media has been classified to a higher sensitivity or classification.

Other controls in Guidelines for media

ISM-0325 Any media connected to a system with a higher sensitivity or classification than the media
ISM-0330 Before reclassifying media to a lower sensitivity or classification, the media is sanitise
ISM-0332 Media, with the exception of internally mounted fixed media within information technology
ISM-0337 Media is only used with systems that are authorised to process, store or communicate its s
ISM-0347 When transferring data manually between two systems belonging to different security domain
ISM-0348 Media sanitisation processes, and supporting media sanitisation procedures, are developed,
ISM-0350 The following media types are destroyed prior to their disposal: - microfiche and microfil
ISM-0351 Volatile media is sanitised by removing its power for at least 10 minutes.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls