Australian Information Security Manual

Guidelines for media

Australian Information Security Manual ISM-0839: The destruction of media storing accountable material is not outsourced.

The destruction of media storing accountable material is not outsourced.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for media

ISM-0323 Media is classified to the highest sensitivity or classification of data it stores, unless
ISM-0325 Any media connected to a system with a higher sensitivity or classification than the media
ISM-0330 Before reclassifying media to a lower sensitivity or classification, the media is sanitise
ISM-0332 Media, with the exception of internally mounted fixed media within information technology
ISM-0337 Media is only used with systems that are authorised to process, store or communicate its s
ISM-0347 When transferring data manually between two systems belonging to different security domain
ISM-0348 Media sanitisation processes, and supporting media sanitisation procedures, are developed,
ISM-0350 The following media types are destroyed prior to their disposal: - microfiche and microfil

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls