Australian Information Security Manual
Guidelines for personnel security

Australian Information Security Manual ISM-0409: Foreign national access to AUSTEO and REL systems

Foreign nationals, including seconded foreign nationals, do not have access to systems that process, store or communicate AUSTEO or REL data unless effective controls are in place to ensure such data is not accessible to them.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 4 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

New Zealand Information Security Manual (NZISM) · 2 controls

  • 9.2.15.C.02 9.2.15.C.02 No foreign national access to NZEO-protected systems
  • 9.2.16.C.01 9.2.16.C.01 Foreign nationals limited to information releasable to their nation

ISO 27002:2022 · 1 control

Protective Security Policy Framework (PSPF) Release 2026 · 1 control

  • 0080 0080 Never share AUSTEO with non-citizens without an exemption

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Guidelines for personnel security

Query this from an agent

The graph holds this control, the 4 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Australian Information Security Manual controls