Australian Information Security Manual

Guidelines for personnel security

Australian Information Security Manual ISM-1612: Break glass accounts are only used for specific authorised activities.

Break glass accounts are only used for specific authorised activities.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for personnel security

ISM-0078 Systems processing, storing or communicating AUSTEO or AGAO data remain at all times under
ISM-0252 Cyber security awareness training is undertaken annually by all personnel and covers: - th
ISM-0258 A web usage policy is developed, implemented and maintained.
ISM-0405 Requests for unprivileged access to systems and their resources are validated when first r
ISM-0407 A secure record is maintained for the life of systems and their resources that covers the
ISM-0409 Foreign nationals, including seconded foreign nationals, do not have access to systems tha
ISM-0411 Foreign nationals, excluding seconded foreign nationals, do not have access to systems tha
ISM-0414 Personnel granted access to systems and their resources are uniquely identifiable.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls