New Zealand Information Security Manual (NZISM)
Media + Cloud + Outsourcing

New Zealand Information Security Manual (NZISM) NZISM-7: Media Handling, Outsourcing, Cloud Services, and Remote Access

Apply NZISM Chapter 16 Media Handling and Destruction including classification-appropriate destruction (degaussing for classified magnetic media + shredding for paper + physical destruction for non-magnetic). Manage outsourcing and third-party service providers per NZISM Chapter 17 including due diligence + contractual security clauses + offshoring restrictions for SECRET and above. Use cloud services per NZISM Chapter 18 + NZ Government Cloud Computing Risk Discussion Paper + ALL-OF-GOVERNMENT Cloud Computing arrangement preferred suppliers (AWS + Microsoft Azure + Google Cloud + Datacom + Catalyst NZ + Spark + Revera). Enable remote access and teleworking per NZISM Chapter 19.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.