Australian Information Security Manual ISM-0337: Using media only with authorised systems

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Guidelines for media

• ISM-0323 Classifying media by data held
• ISM-0325 Reclassifying media to a higher classification
• ISM-0330 Reclassifying media to a lower classification
• ISM-0332 Labelling media with protective markings
• ISM-0347 Write-once media for cross-domain transfers
• ISM-0348 Media sanitisation processes and procedures
• ISM-0350 Destroying media that cannot be sanitised
• ISM-0351 Removing power from volatile media