ASD ISM 1100 Terminating TOP SECRET cables in cabinets
What it says
TOP SECRET cables are terminated in an individual TOP SECRET cabinet.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishTOP SECRET cables must be connected only in designated TOP SECRET cabinets for security purposes.
This control means that any cables carrying highly classified information, labelled as TOP SECRET, should only be hooked up in cabinets specifically designed for such sensitive data. This is crucial because if these cables are connected in an improper place, it increases the risk of this very sensitive information being accessed by unauthorised people, leading to national security concerns.
Free. Save your status, tasks and notes.
Why it matters
Improperly terminated TOP SECRET cables risk unauthorised access, potentially leading to critical national security breaches.
How to implement
The IT team should identify all the TOP SECRET cables within the organisation.
They can do this by reviewing network diagrams and consulting with key staff who manage classified information.
Facility managers should work with the IT team to designate specific cabinets as TOP SECRET cabinets.
This involves setting aside secure locations and labelling them clearly as only for TOP SECRET cables.
An IT manager should oversee the installation of the TOP SECRET cables in these designated cabinets.
This means ensuring only authorised staff with the right security clearance perform the installation.
Security officers should ensure regular checks are done to verify that the TOP SECRET cables remain within their designated cabinets.
This can be done monthly through physical inspections and comparing against the network layout.
Staff responsible for handling these cables should receive training on the procedures for managing TOP SECRET cables.
This training should cover how to properly terminate cables and the importance of maintaining their secrecy within the designated cabinets.
Keep it running
Verify TOP SECRET cable terminations are only within the individual TOP SECRET cabinet, and inspect cabinets routinely for unauthorised terminations.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
The list of designated TOP SECRET cabinets within the facility.
Look at
The list to ensure it matches the physical layout of the building and includes every location where these cables are used.
Good evidence
Is a dated document listing each cabinet's location with a security officer's approval.
- Check 2 of 5What an auditor asks for
Good evidence
Is a list showing clearance levels and dates of training completed.
- Check 3 of 5What an auditor asks for
Ask for
Recent inspection reports of the TOP SECRET cabinets. Verify that these reports were conducted routinely as per the policy and document any findings or non-compliance.
Good evidence
Includes signed inspection logs.
- Check 4 of 5What an auditor asks for
Look at
The details concerning the scope of the training and participation records.
Good evidence
Includes up-to-date certificates of completion with specified training content.
- Check 5 of 5What an auditor asks for
Ask for
The policy document that outlines the procedures for terminating TOP SECRET cables.
Look at
Procedures that align with Australian signals and security standards, specifically mentioning the Essential Eight where applicable.
Good evidence
Is a policy document with specific procedures and a last review date.
Mappings
Closest match in ISO/IEC 27001: A.7.12, Secure cabling for power and data, which this control partially meets.
ISO/IEC 27001: 1 mapping
This control partially meets A.7.12.
ISM-1100 requires TOP SECRET cables to be terminated only within an individual TOP SECRET cabinet, which specifies a precise location for high-classification cable terminations. ISO/IEC 27001:2022 Annex A 7.12 covers the protection of power and data cabling against interception, interference, or damage, by securing routes and termination points like comms cabinets. ISM-1100 is a specific, prescriptive requirement for a particular cabling classification, whereas Annex A 7.12 is broader and risk-based, covering all relevant environments.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.




