Australian Information Security Manual ISM-0840: When outsourcing the destruction of media storing non-accountable material, a National Ass

When outsourcing the destruction of media storing non-accountable material, a National Association for Information Destruction AAA certified destruction service with endorsements, as specified in ASIO's Protective Security Circular-167, is used.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for media

ISM-0323 Media is classified to the highest sensitivity or classification of data it stores, unless
ISM-0325 Any media connected to a system with a higher sensitivity or classification than the media
ISM-0330 Before reclassifying media to a lower sensitivity or classification, the media is sanitise
ISM-0332 Media, with the exception of internally mounted fixed media within information technology
ISM-0337 Media is only used with systems that are authorised to process, store or communicate its s
ISM-0347 When transferring data manually between two systems belonging to different security domain
ISM-0348 Media sanitisation processes, and supporting media sanitisation procedures, are developed,
ISM-0350 The following media types are destroyed prior to their disposal: - microfiche and microfil

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls