Australian Information Security Manual ISM-1218: IT equipment, including associated media, that is located overseas and has processed, stor

IT equipment, including associated media, that is located overseas and has processed, stored or communicated AUSTEO or AGAO data, is sanitised in situ.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for information technology equipment

ISM-0293 IT equipment is classified based on the highest sensitivity or classification of data that
ISM-0294 IT equipment, with the exception of high assurance IT equipment, is labelled with protecti
ISM-0296 ASD's approval is sought before applying labels to external surfaces of high assurance IT
ISM-0305 Maintenance and repairs of IT equipment is carried out on site by an appropriately cleared
ISM-0306 If an appropriately cleared technician is not used to undertake maintenance or repairs of
ISM-0307 If an appropriately cleared technician is not used to undertake maintenance or repairs of
ISM-0310 IT equipment maintained or repaired off site is done so at facilities approved for handlin
ISM-0311 IT equipment containing media is sanitised by removing the media from the IT equipment or

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls