New Zealand Information Security Manual (NZISM)
Chapter 20: Data management – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 20.3.12.C.01: Enforce an allow list of content types

What does 20.3.12.C.01 require?

For CONFIDENTIAL, SECRET and TOP SECRET systems, agencies must create, and then enforce, a list of allowed content types, informed by business needs and by what a security risk assessment found.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 20: Data management – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls