Australian Information Security Manual

Guidelines for physical security

Australian Information Security Manual ISM-2009: Unauthorised medical devices are not brought into SECRET and TOP SECRET areas.

Unauthorised medical devices are not brought into SECRET and TOP SECRET areas.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for physical security

ISM-0161 IT equipment and media are secured when not in use.
ISM-0164 Unauthorised people are prevented from observing systems, in particular workstation displa
ISM-0225 Unauthorised RF and IR devices are not brought into SECRET and TOP SECRET areas.
ISM-0810 Classified systems are secured in facilities that meet the requirements for a security zon
ISM-0813 Server rooms, communications rooms and security containers are not left in unsecured state
ISM-0829 Security measures are used to detect and respond to unauthorised RF devices in SECRET and
ISM-1053 Classified servers, network devices and cryptographic equipment are secured in server room
ISM-1074 Keys or equivalent access mechanisms to server rooms, communications rooms and security co

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls