Australian Information Security Manual

Guidelines for database systems

Australian Information Security Manual ISM-1277: Data communicated between database servers and web servers is encrypted.

Data communicated between database servers and web servers is encrypted.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for database systems

ISM-0393 Databases and their contents are classified based on the sensitivity or classification of
ISM-1243 A database register is developed, implemented, maintained and verified on a regular basis.
ISM-1255 Database users' ability to access, insert, modify and remove database contents is restrict
ISM-1256 File-based access controls are applied to database files.
ISM-1268 The need-to-know principle is enforced for database contents through the application of mi
ISM-1269 Database servers and web servers are functionally separated.
ISM-1270 Database servers are placed on a different network segment to user workstations.
ISM-1271 Network access controls are implemented to restrict database server communications to stri

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls