New Zealand Information Security Manual (NZISM)

Chapter 1: About information security – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 1.2.15.C.02: Comply with GCSB-designated priority NZISM requirements

What does 1.2.15.C.02 require?

Where the GCSB decides that a new standard, policy or guideline introduced into the NZISM, or any further security policy, carries particular importance, agencies must meet the newly specified requirements within the implementation timeframes set.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter 1: About information security – New Zealand Information Security Manual (NZISM)

1.1.64.C.01 1.1.64.C.01 Dispensations for baseline non-compliance granted by Accreditation Authority
1.1.65.C.01 1.1.65.C.01 Risk assessment supporting a non-compliance dispensation
1.1.66.C.01 1.1.66.C.01 Consult originating agency before classification non-compliance
1.1.66.C.02 1.1.66.C.02 Consult foreign government before NZISM non-compliance
1.1.67.C.01 1.1.67.C.01 Formal consultation for shared and All-of-Government systems
1.1.68.C.01 1.1.68.C.01 Annual review of non-compliance decisions
1.1.69.C.01 1.1.69.C.01 Retain records of non-compliance decisions and assessments
1.1.69.C.02 1.1.69.C.02 Recording residual risk from unimplemented recommended controls

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All New Zealand Information Security Manual (NZISM) controls