New Zealand Information Security Manual (NZISM)

Chapter 11: Communications Systems and Devices – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 11.1.17.C.02: 11.1.17.C.02 Identify Bluetooth type, version and security capabilities for risk decisions

For the devices that form Bluetooth connections, agencies should record: (1) the Bluetooth type, whether BR/EDR or LE; (2) the Bluetooth version; and (3) the security capabilities. This information should then feed the agency's risk decisions about Bluetooth use.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter 11: Communications Systems and Devices – New Zealand Information Security Manual (NZISM)

11.1.15.C.01 11.1.15.C.01 Bluetooth usage policy defining permitted and prohibited use
11.1.15.C.02 11.1.15.C.02 Bluetooth policy specifies security controls and verification methods
11.1.16.C.01 11.1.16.C.01 Bluetooth pairing restricted to authorised devices
11.1.16.C.02 11.1.16.C.02 Bluetooth discoverability disabled except during pairing
11.1.16.C.03 11.1.16.C.03 Bluetooth pairing performed only in access-controlled locations
11.1.16.C.04 11.1.16.C.04 Removal of Bluetooth pairings no longer needed
11.1.17.C.01 11.1.17.C.01 Most secure Bluetooth configuration supported by paired devices
11.1.17.C.03 11.1.17.C.03 Explicit user authentication of new Bluetooth connections

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All New Zealand Information Security Manual (NZISM) controls