Australian Information Security Manual
Guidelines for personnel security

Australian Information Security Manual ISM-0441: Restricting temporary access to required data

What does ISM-0441 require?

When personnel are granted temporary access to systems and their resources, effective controls are put in place to restrict their access to only data required for them to undertake their duties.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 4 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

New Zealand Information Security Manual (NZISM) · 3 controls

  • 9.2.17.C.02 9.2.17.C.02 Conditions for granting limited higher access
  • 9.2.18.C.01 9.2.18.C.01 Controls on users granted limited higher access
  • 9.2.19.C.03 9.2.19.C.03 Conditions for granting emergency system access

Protective Security Policy Framework (PSPF) Release 2026 · 1 control

  • 0123 0123 Supervise temporary access

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Guidelines for personnel security

Query this from an agent

The graph holds this control, the 4 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Australian Information Security Manual controls