New Zealand Information Security Manual (NZISM)
Chapter 18: Network security – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 18.6.8.C.01: Evaluated peripheral switch assurance by classification pair

What does 18.6.8.C.01 require?

Agencies that use a peripheral switch to access a classified system together with a lower classified system must use an evaluated product at the assurance level set by the table in this control: a RESTRICTED high system with an UNCLASSIFIED low system needs EAL2 or a PP; a CONFIDENTIAL high system paired with UNCLASSIFIED, RESTRICTED or CONFIDENTIAL needs high assurance; a SECRET high system paired with UNCLASSIFIED, RESTRICTED, CONFIDENTIAL or SECRET needs high assurance; and a TOP SECRET high system paired with UNCLASSIFIED, RESTRICTED, CONFIDENTIAL, SECRET or TOP SECRET needs high assurance. The low side may be a lower classified system or an alternate trust domain at the same level.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Australian Information Security Manual · 1 control

  • ISM-1480 High assurance switches to lower classified systems

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Chapter 18: Network security – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls