Maintain a Comprehensive Cable Register
Keep a detailed record of each cable, including ID, colour, and location, to ensure proper cable management and security.
Plain language
Keeping a detailed record of all your cables might seem like a minor task, but it's crucial for maintaining the security and efficiency of your network. Without a proper cable register, you could easily lose track of important cables, allowing for potential mix-ups or security breaches, which can lead to data loss or downtime.
Framework
ASD Information Security Manual (ISM)
Control effect
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
May 2021
Control Stack last updated
19 Mar 2026
E8 maturity levels
N/A
Section
Cabling infrastructureTopic
Cable RegisterOfficial control statement
A cable register contains the following for each cable: - cable identifier - cable colour - sensitivity/classification - source - destination - location - seal numbers (if applicable).
Why it matters
Without a comprehensive cable register, cables can’t be reliably traced (ID, colour, classification, source/destination, location, seals), increasing misconnection and undetected tampering risks.
Operational notes
Reconcile the cable register with the physical cabling after installs/moves: confirm identifier, colour, classification, source/destination, location, and record seal numbers where used.
Implementation tips
- The IT manager should establish a cable register: Start by listing every cable currently in use, including details like its unique identifier, colour, the locations it connects, and any classification markings. Use a spreadsheet or dedicated software to keep this easily searchable and up-to-date.
- Facilities staff should be involved in mapping the cables: They can assist by physically tracing cables from their source to destination and noting their colours and locations. Ensure all sections of the office or building are thoroughly covered.
- An IT officer should categorise cables based on sensitivity: Work with the security officer to classify cables that handle sensitive data and make sure this classification is recorded in the register. This helps prioritise security measures.
- Assign someone to regularly update the register: This could be part of the IT support team's routine maintenance tasks. Ensure any changes in cabling, such as additions, removals, or rerouting, are promptly entered into the register.
- Conduct training for relevant staff: Educate those who manage or frequently interact with cables on the importance of updating the register. Provide a straightforward process, like a simple form, they can use to report any changes in cable setup.
Audit / evidence tips
- AskThe current cable register: It should list every cable by identifier and include details about colour, location, source, destination, and any applicable seal numbers
- AskHow changes to cabling are communicated and logged in the register GoodWill detail a clear process from physical changes to documentation updates
- GoodOutcome is an accurate match with no discrepancies
- GoodDocument will outline steps for updates and designate who does this regularly
Cross-framework mappings
How ISM-0208 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
| handshake Supports (2) expand_less | ||
| Annex A 5.12 | ISM-0208 requires a cable register that captures each cable’s sensitivity/classification and other traceability details (source, destinat... | |
| Annex A 5.13 | ISM-0208 requires maintaining a comprehensive cable register including identifiers, colour, classification/sensitivity, endpoints, locati... | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.