Skip to content
Communications infrastructure
ASD ISMISM-0218

ASD ISM 0218 Label and protect long TS fibre-optic leads

What it says

If TOP SECRET fibre-optic fly leads exceeding five metres in length are used to connect wall outlet boxes to IT equipment, they are run in a protective and easily inspected pathway that is clearly labelled at the IT equipment end with the wall outlet box's identifier.

Quoted as published. Everything else on this page is written by Control Stack.

What it means

In plain English

Ensure long TS fibre-optic cables are protected, easy to inspect, and labelled at the equipment end.

This control is about making sure that long fibre-optic cables, which are used to send data between equipment and wall outlets, are well protected and clearly labelled. It matters because if these cables are damaged or incorrectly connected, sensitive 'top secret' information could be exposed or lost, potentially leading to serious security breaches.

Why it matters

A lack of protection and labelling for >5m TS fibre-optic cables risks data breaches by exposing TOP SECRET communications to damage or misrouting.

How to implement

  1. The IT team should create a clear and protective pathway for long fibre-optic cables.

    They can do this by installing cable trays or conduits that are easy to open up for inspections, ensuring that all cables are tucked securely and cannot be damaged or accidentally unplugged.

  2. Facility managers should ensure the pathways of these fibre-optic cables are properly maintained.

    Conduct regular checks to make sure there is no physical damage or wear that might compromise the cables' security or performance.

  3. The IT staff responsible for network setup should label the fibre-optic cables at the equipment end with the identifier from the wall outlet box.

    Use durable labels that can withstand wear and tear and ensure they are easy to read.

  4. Procurement officers should purchase only cables and labelling materials that meet required standards for top secrecy environments.

    Work with vendors who understand security needs and can provide compliant products.

  5. Managers should educate staff about the importance of not tampering with these labelled cables.

    Host information sessions so everyone understands the role these cables play in securing sensitive information.

Keep it running

Regularly inspect the >5m TS fibre fly lead pathway for tampering/damage and confirm the IT-end label matches the wall outlet box identifier.

Evidence and audit

  1. Check 1 of 5What an auditor asks for

    Ask for

    The cable layout plan: Request a document or blueprint showing where and how fibre-optic cables are installed.

    Look at

    The pathways to ensure they are direct and protective.

    Good evidence

    Plan is clear, with pathways that minimise exposure and damage risk.

  2. Check 2 of 5What an auditor asks for

    Ask for

    Them how they label and verify the integrity of these cables.

    Good evidence

    Includes a regular inspection process and clear record-keeping of checks.

  3. Check 3 of 5What an auditor asks for

    Look at

    Easy access to cable trays and clear, readable labels on each cable.

    Good evidence

    Inspection is quick, thorough, and finds no unlabelled or loosely secured cables.

  4. Check 4 of 5What an auditor asks for

    Ask for

    To see logs or schedules detailing regular maintenance.

    Look at

    Any recorded issues or repairs and how they were addressed.

    Good evidence

    Record is up-to-date, detailed, and shows timely resolutions to past issues.

  5. Check 5 of 5What an auditor asks for

    Look at

    How well-protected the cables are and if any potential hazards are nearby. Good pathways are clearly secured, free from damage, and properly labelled.

Mappings

Closest match in ISO/IEC 27001: A.5.13, Labelling of information, which this control partially meets.

ISO 27001

ISO/IEC 27001: 1 mapping

  • A.5.13Labelling of informationPartially meets

Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.