Australian Information Security Manual

Guidelines for media

Australian Information Security Manual ISM-0337: Media is only used with systems that are authorised to process, store or communicate its s

Media is only used with systems that are authorised to process, store or communicate its sensitivity or classification.

Other controls in Guidelines for media

ISM-0323 Media is classified to the highest sensitivity or classification of data it stores, unless
ISM-0325 Any media connected to a system with a higher sensitivity or classification than the media
ISM-0330 Before reclassifying media to a lower sensitivity or classification, the media is sanitise
ISM-0332 Media, with the exception of internally mounted fixed media within information technology
ISM-0347 When transferring data manually between two systems belonging to different security domain
ISM-0348 Media sanitisation processes, and supporting media sanitisation procedures, are developed,
ISM-0350 The following media types are destroyed prior to their disposal: - microfiche and microfil
ISM-0351 Volatile media is sanitised by removing its power for at least 10 minutes.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls