New Zealand Information Security Manual (NZISM)

Chapter 1: About information security – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 1.2.15.C.01: 1.2.15.C.01 Use current NZISM version for system design

Agencies carrying out system design work, whether the project is delivered in-house or outsourced, must take their information security requirements from the most recent version of the NZISM.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter 1: About information security – New Zealand Information Security Manual (NZISM)

1.1.64.C.01 1.1.64.C.01 Dispensations for baseline non-compliance granted by Accreditation Authority
1.1.65.C.01 1.1.65.C.01 Risk assessment supporting a non-compliance dispensation
1.1.66.C.01 1.1.66.C.01 Consult originating agency before classification non-compliance
1.1.66.C.02 1.1.66.C.02 Consult foreign government before NZISM non-compliance
1.1.67.C.01 1.1.67.C.01 Formal consultation for shared and All-of-Government systems
1.1.68.C.01 1.1.68.C.01 Annual review of non-compliance decisions
1.1.69.C.01 1.1.69.C.01 Retain records of non-compliance decisions and assessments
1.1.69.C.02 1.1.69.C.02 Recording residual risk from unimplemented recommended controls

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All New Zealand Information Security Manual (NZISM) controls