ISM control lookup / Topic

Guidelines for media

56 controls · September 2026 edition

• ISM-0323 · Classifying media

  Media is classified to the highest sensitivity or classification of data it stores, unless the media has been classified to a higher sensitivity or classification.

• ISM-0325 · Reclassifying media

  Any media connected to a system with a higher sensitivity or classification than the media is reclassified to the higher sensitivity or classification, unless the media is read-only or the system has a mechanism through which read-only access can be ensured.

• ISM-0330 · Reclassifying media

  Before reclassifying media to a lower sensitivity or classification, the media is sanitised or destroyed, and a formal administrative decision is made to reclassify it.

• ISM-0332 · Labelling media

  Media, except for internally mounted fixed media within information technology equipment, is labelled with protective markings reflecting its sensitivity or classification.

• ISM-0337 · Classifying media

  Media is only used with systems that are authorised to process, store or communicate its sensitivity or classification.

• ISM-0347 · Using media for data transfers

  When transferring data manually between two systems belonging to different security domains, write-once media is used unless the destination system has a mechanism through which read-only access can be ensured.

• ISM-0348 · Media sanitisation processes and procedures

  Media sanitisation processes, and supporting media sanitisation procedures, are developed, implemented and maintained.

• ISM-0350 · Media that cannot be sanitised

  The following media types are destroyed prior to their disposal:

• ISM-0351 · Volatile media sanitisation

  Volatile media is sanitised by removing its power for at least 10 minutes.

• ISM-0352 · Volatile media sanitisation

  SECRET and TOP SECRET volatile media is sanitised by overwriting it at least once in its entirety with a random pattern followed by a read back for verification.

• ISM-0354 · Non-volatile magnetic media sanitisation

  Non-volatile magnetic media is sanitised by overwriting it at least once (or three times if pre-2001 or under 15 GB) in its entirety with a random pattern followed by a read back for verification.

• ISM-0356 · Treatment of non-volatile magnetic media following sanitisation

  Following sanitisation, SECRET and TOP SECRET non-volatile magnetic media retains its classification.

• ISM-0357 · Non-volatile erasable programmable read-only memory media sanitisation

  Non-volatile EPROM media is sanitised by applying three times the manufacturer’s specified ultraviolet erasure time and then overwriting it at least once in its entirety with a random pattern followed by a read back for verification.

• ISM-0358 · Treatment of non-volatile erasable and electrically erasable programmable read-only memory media following sanitisation

  Following sanitisation, SECRET and TOP SECRET non-volatile EPROM and EEPROM media retains its classification.

• ISM-0359 · Non-volatile flash memory media sanitisation

  Non-volatile flash memory media is sanitised by overwriting it at least twice in its entirety with a random pattern followed by a read back for verification.

• ISM-0360 · Treatment of non-volatile flash memory media following sanitisation

  Following sanitisation, SECRET and TOP SECRET non-volatile flash memory media retains its classification.

• ISM-0361 · Degaussing magnetic media

  Magnetic media is destroyed using a degausser with a suitable magnetic field strength and magnetic orientation.

• ISM-0362 · Degaussing magnetic media

  Product-specific directions provided by degausser manufacturers are followed.

• ISM-0363 · Media destruction processes and procedures

  Media destruction processes, and supporting media destruction procedures, are developed, implemented and maintained.

• ISM-0368 · Media destruction methods

  Media destroyed using a hammer mill, disintegrator, grinder/sander or by cutting results in media waste particles no larger than 9 mm.

• ISM-0370 · Supervision of destruction

  The destruction of media is performed under the supervision of at least one cleared person.

• ISM-0371 · Supervision of destruction

  Personnel supervising the destruction of media supervise its handling to the point of destruction and ensure that the destruction is completed successfully.

• ISM-0372 · Supervision of accountable material destruction

  The destruction of media storing accountable material is performed under the supervision of at least two cleared personnel.

• ISM-0373 · Supervision of accountable material destruction

  Personnel supervising the destruction of media storing accountable material supervise its handling to the point of destruction, ensure that the destruction is completed successfully and sign a destruction certificate afterwards.

• ISM-0374 · Media disposal processes and procedures

  Media disposal processes, and supporting media disposal procedures, are developed, implemented and maintained.

• ISM-0375 · Disposal of media

  Following sanitisation, destruction or declassification, a formal administrative decision is made to release media, or its waste, into the public domain.

• ISM-0378 · Disposal of media

  Labels and markings indicating the owner, sensitivity, classification or any other marking that can associate media with its prior use are removed prior to its disposal.

• ISM-0459 · Encrypting media

  Full disk encryption, or partial encryption where access controls only allow writing to encrypted partitions or volumes, is implemented when encrypting media.

• ISM-0831 · Handling media

  Media is handled in a manner suitable for its sensitivity or classification.

• ISM-0835 · Treatment of volatile media following sanitisation

  Following sanitisation, TOP SECRET volatile media retains its classification if it stored static data for an extended period, or had data repeatedly stored on or written to the same memory location for an extended period.

• ISM-0836 · Non-volatile electrically erasable programmable read-only memory media sanitisation

  Non-volatile EEPROM media is sanitised by overwriting it at least once in its entirety with a random pattern followed by a read back for verification.

• ISM-0839 · Outsourcing media destruction

  The destruction of media storing accountable material is not outsourced.

• ISM-0840 · Outsourcing media destruction

  When outsourcing the destruction of media storing non-accountable material, a National Association for Information Destruction AAA certified destruction service with endorsements, as specified in ASIO’s Protective Security Circular-167, is used.

• ISM-0947 · Using media for data transfers

  When transferring data manually between two systems belonging to different security domains, rewritable media is sanitised after each data transfer.

• ISM-1059 · Encrypting media

  All data stored on media is encrypted using ASD-approved cryptography.

• ISM-1065 · Non-volatile magnetic media sanitisation

  The host-protected area and device configuration overlay table are reset prior to the sanitisation of non-volatile magnetic hard drives.

• ISM-1067 · Non-volatile magnetic media sanitisation

  The ATA secure erase command is used, in addition to block overwriting software, to ensure the growth defects table of non-volatile magnetic hard drives is overwritten.

• ISM-1160 · Media destruction equipment

  If using degaussers to destroy media, degaussers evaluated by the United States’ National Security Agency are used.

• ISM-1359 · Removable media usage policy

  A removable media usage policy is developed, implemented and maintained.

• ISM-1361 · Media destruction equipment

  Security Construction and Equipment Committee-approved equipment or ASIO-approved equipment is used when destroying media.

• ISM-1517 · Media destruction methods

  Equipment that is capable of reducing microform to a fine powder, with resultant particles not showing more than five consecutive characters per particle upon microscopic inspection, is used to destroy microfiche and microfilm.

• ISM-1549 · Media management policy

  A media management policy is developed, implemented and maintained.

• ISM-1600 · Sanitising media before first use

  Media is sanitised before it is used for the first time.

• ISM-1641 · Degaussing magnetic media

  Following the use of a degausser, magnetic media is physically damaged by deforming any internal platters.

• ISM-1642 · Sanitising media before first use

  Media is sanitised before it is reused in a different security domain.

• ISM-1713 · Removable media register

  A removable media register is developed, implemented, maintained and regularly verified.

• ISM-1722 · Media destruction methods

  Electrostatic memory devices are destroyed using a furnace/incinerator, hammer mill, disintegrator or grinder/sander.

• ISM-1723 · Media destruction methods

  Magnetic floppy disks are destroyed using a furnace/incinerator, hammer mill, disintegrator, degausser or by cutting.

• ISM-1724 · Media destruction methods

  Magnetic hard disks are destroyed using a furnace/incinerator, hammer mill, disintegrator, grinder/sander or degausser.

• ISM-1725 · Media destruction methods

  Magnetic tapes are destroyed using a furnace/incinerator, hammer mill, disintegrator, degausser or by cutting.

• ISM-1726 · Media destruction methods

  Optical disks are destroyed using a furnace/incinerator, hammer mill, disintegrator, grinder/sander or by cutting.

• ISM-1727 · Media destruction methods

  Semiconductor memory is destroyed using a furnace/incinerator, hammer mill or disintegrator.

• ISM-1728 · Treatment of media waste particles

  The resulting media waste particles from the destruction of SECRET media is stored and handled as OFFICIAL if less than or equal to 3 mm, PROTECTED if greater than 3 mm and less than or equal to 6 mm, or SECRET if greater than 6 mm and less than or equal to 9 mm.

• ISM-1729 · Treatment of media waste particles

  The resulting media waste particles from the destruction of TOP SECRET media is stored and handled as OFFICIAL if less than or equal to 3 mm, or SECRET if greater than 3 mm and less than or equal to 9 mm.

• ISM-1735 · Media that cannot be successfully sanitised

  Media that cannot be successfully sanitised is destroyed prior to its disposal.

• ISM-2109 · Encrypting media

  Pre-boot authentication using passwords, or managed network-based key release, is implemented for media containing encrypted system volumes.