Australian Information Security Manual ISM-0359: Non-volatile flash memory media is sanitised by overwriting it at least twice in its entir

Non-volatile flash memory media is sanitised by overwriting it at least twice in its entirety with a random pattern followed by a read back for verification.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for media

ISM-0323 Media is classified to the highest sensitivity or classification of data it stores, unless
ISM-0325 Any media connected to a system with a higher sensitivity or classification than the media
ISM-0330 Before reclassifying media to a lower sensitivity or classification, the media is sanitise
ISM-0332 Media, with the exception of internally mounted fixed media within information technology
ISM-0337 Media is only used with systems that are authorised to process, store or communicate its s
ISM-0347 When transferring data manually between two systems belonging to different security domain
ISM-0348 Media sanitisation processes, and supporting media sanitisation procedures, are developed,
ISM-0350 The following media types are destroyed prior to their disposal: - microfiche and microfil

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls