Australian Information Security Manual ISM-1439: If using CDNs, disclosing the IP addresses of web servers under an organisation's control

If using CDNs, disclosing the IP addresses of web servers under an organisation's control (referred to as origin servers) is avoided and access to the origin servers is restricted to the CDNs and authorised management networks.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for networking

ISM-0385 Servers maintain effective functional separation with other servers allowing them to opera
ISM-0516 Network documentation includes high-level network diagrams showing all connections into ne
ISM-0518 Network documentation is developed, implemented and maintained.
ISM-0520 Network access controls are implemented on networks to prevent the connection of unauthori
ISM-0521 IPv6 functionality is disabled in dual-stack network devices unless it is being used.
ISM-0529 VLANs are not used to separate network traffic between networks belonging to different sec
ISM-0530 Network devices managing VLANs are administered from the most trusted security domain.
ISM-0534 Unused physical ports on network devices are disabled.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls