New Zealand Information Security Manual (NZISM)
Chapter 20: Data management – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 20.3.12.C.02: Maintain an allow list of permitted content

What does 20.3.12.C.02 require?

Agencies should draw up and enforce a list of allowed content types, informed by business needs and the findings of a security risk assessment.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 20: Data management – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls