Skip to content
Media
ASD ISMISM-0373

ASD ISM 0373 Supervise and certify accountable material destruction

What it says

Personnel supervising the destruction of media storing accountable material supervise its handling to the point of destruction, ensure that the destruction is completed successfully and sign a destruction certificate afterwards.

Quoted as published. Everything else on this page is written by Control Stack.

What it means

In plain English

Supervisors ensure accountable material is destroyed properly and sign a certificate to confirm it.

This control is about making sure that sensitive materials, like documents or old computer disks that contain important data, are properly destroyed when they're no longer needed. If we don't do this right, there's a risk that private information might be leaked, which can harm your business's reputation or even lead to legal troubles.

Why it matters

Failure to certify accountable material destruction can enable unrecoverable data compromise, regulatory breach and legal liability.

How to implement

  1. Managers should designate responsible personnel to oversee material destruction.

    They should assign a trusted employee who is aware of what materials need to be destroyed and ensure they follow through from start to finish.

  2. The designated supervisor needs to be equipped with a destruction checklist.

    This list should have detailed steps on how to properly destroy each type of material and ensure nothing is skipped.

  3. Employees responsible for destruction should employ only approved methods, like shredders for paper or professional services for electronics.

    They must follow the procedure exactly as specified to ensure complete destruction.

  4. After destruction, the supervising person should complete a destruction certificate.

    This certificate should detail what was destroyed, the method used, and it needs to be signed to verify accuracy.

  5. Keep records of all destruction certificates securely filed.

    This will help in future audits and ensure there is a clear trail of accountability for all destroyed materials.

Keep it running

Supervise accountable material from custody to destruction, confirm the method completed, and sign and retain a destruction certificate.

Evidence and audit

  1. Check 1 of 4What an auditor asks for

    Ask for

    The list of materials designated for destruction: Review the list for completeness, ensuring sensitive items are clearly indicated.

    Good evidence

    Is a comprehensive list with item descriptions and their classification.

  2. Check 2 of 4What an auditor asks for

    Ask for

    To see a completed destruction certificate.

    Look at

    The details such as what was destroyed, how it was destroyed, and signatures from the involved parties.

    Good evidence

    Demonstrates completeness and clarity in documenting the destruction process.

  3. Check 3 of 4What an auditor asks for

    Ask for

    Them about their understanding of the destruction process and how they ensure compliance.

    Good evidence

    Reflects a clear understanding of procedures and the importance of each step in the process.

  4. Check 4 of 4What an auditor asks for

    Good evidence

    Includes secure, organised, and accessible records that match the number of signed destruction certificates.

Mappings

Closest match in ISO/IEC 27001: A.7.14, Secure disposal or re-use of equipment, which this control covers in full and more.

ISO 27001

ISO/IEC 27001: 1 mapping

  • A.7.14Secure disposal or re-use of equipmentBroader than

Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.