ASD ISM 0213 Segregate patch panels for SECRET-level cables
What it says
SECRET and TOP SECRET cables are terminated on their own individual patch panels.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishSecret and top secret cables must be connected to separate patch panels for security.
This control is about keeping secret and top secret cables separate by connecting them to different patch panels. This is important because if these cables are mixed, sensitive information could be accidentally exposed to people without the proper clearance, risking security breaches or information leaks.
Free. Save your status, tasks and notes.
Why it matters
If SECRET and TOP SECRET cables share a patch panel, cross-connection or improper access could expose higher-classified traffic and breach national security.
How to implement
The IT team should identify which cables carry secret and top secret information.
They can do this by checking the documentation that labels the cables based on their information classification.
Once identified, the IT team should ensure that each group of classified cables is connected to its own patch panel.
They can do this by physically separating the cables and using different panels that are clearly labelled for secret or top secret use.
Managers should support the IT team by ensuring they have the necessary budget and resources to purchase separate patch panels if needed, and to make the necessary physical adjustments.
System owners should work with the IT team to regularly review the setup of patch panels to ensure that no mistakes have been made.
This can be done through periodic inspections.
Training needs to be provided by the IT team for all staff dealing with these systems to ensure they understand the importance of keeping patch panels segregated and how to avoid errors.
Keep it running
Maintain dedicated, clearly labelled patch panels for SECRET and TOP SECRET; perform scheduled audits and tracing to confirm terminations stay segregated and prevent cross-patching.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
The physical layout documentation of the patch panels: Check if the document includes details about which panels are used for secret and top secret cables.
Good evidence
Is clear documentation with separate listings for each type of information.
- Check 2 of 5What an auditor asks for
Look at
The labels on the physical patch panels: Ensure that there are visibly separate panels clearly labelled as 'Secret' and 'Top Secret'.
Good evidence
Is distinct physical separation and clear labelling.
- Check 3 of 5What an auditor asks for
Ask for
Them to explain the process of segregating patch panels for classified cables.
Good evidence
Is a clear explanation of the physical separation and procedures to ensure it remains that way.
- Check 4 of 5What an auditor asks for
Ask for
To see the budget or purchase orders for patch panel resources.
Look at
Whether separate patch panels for different classifications are accounted for.
Good evidence
Is evidence of allocated resources for separate patch panel implementations.
- Check 5 of 5What an auditor asks for
Good evidence
Is the observed use of correct procedures and adherence to segregation rules.
Mappings
Closest match in ISO/IEC 27001: A.8.22, Network segregation for security, which this control partially meets.
ISO/IEC 27001: 2 mappings
This control partially meets A.8.22.
ISM-0213 requires SECRET and TOP SECRET network cables to be terminated on separate, dedicated patch panels to enforce physical segregation by classification. ISO/IEC 27001:2022 Annex A 8.22 calls for the segregation of services, users, and systems within networks, which can encompass such physical cabling segregation as one implementation approach. Annex A 8.22 is broader, while ISM-0213 is a specific, classified-environment cabling requirement.
This control partially overlaps A.7.12.
ISM-0213 mandates that SECRET and TOP SECRET cables be terminated on individual patch panels to prevent cross-connection and mitigation of information compromise between classifications. Similarly, ISO/IEC 27001:2022 Annex A 7.12 requires secure cabling controls to protect against interception, interference, or damage, aligning with these aims. While A 7.12 focuses on general cable protection measures, ISM-0213 addresses classification-based segregation at patch panel terminations.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.




