ASD ISM 1107 Colour restrictions for wall outlet boxes
What it says
Non-classified, OFFICIAL: Sensitive and PROTECTED wall outlet boxes are coloured neither salmon pink nor red.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishWall outlet boxes must not be coloured salmon pink or red to ensure proper classification.
This control is about making sure that wall outlet boxes, which are used for network connections, are not coloured salmon pink or red. This matters because consistent colouring helps quickly identify the purpose or security level of the outlet, avoiding mistakes that could lead to a mix-up of sensitive information or create security breaches.
Free. Save your status, tasks and notes.
Why it matters
If outlet boxes are salmon pink or red, they may be mistaken for higher classifications, causing incorrect handling and potential exposure of OFFICIAL: Sensitive or PROTECTED systems.
How to implement
Facilities management staff should ensure that any new wall outlet boxes ordered are not in salmon pink or red.
This can be done by listing acceptable colours in purchasing documents and communicating with suppliers ahead of time.
IT team members should conduct a visual check of existing wall outlets to ensure compliance.
They should walk through the office space, noting any non-compliant coloured outlets in order to plan for their replacement.
Procurement officers should verify the colour specifications before finalising purchases for wall outlet boxes.
This involves reviewing product catalogues and confirming that only approved colours are ordered.
Office managers should coordinate with the IT department to label or replace any non-compliant wall outlet boxes.
This may involve scheduling a time that minimises disruption to staff.
The company safety officer should add the colour restriction to the office safety manual.
This will ensure that personnel involved in renovation or IT set-ups are aware of and comply with the colour requirements.
Keep it running
Inspect outlet boxes during installs and routine checks to confirm those serving non-classified, OFFICIAL: Sensitive or PROTECTED areas are not salmon pink or red; rectify any incorrect colours.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
The purchase orders for wall outlets: Their documentation should show compliance with the colour requirement.
Look at
Specific colour descriptions in the order details.
Good evidence
Shows no orders for salmon pink or red boxes.
- Check 2 of 5What an auditor asks for
Ask for
To see the office layout map indicating wall outlet locations and their purposes: Check for any colour codes or descriptions.
Good evidence
Clearly shows compliance with the approved colours throughout the map.
- Check 3 of 5What an auditor asks for
Good evidence
Will include only the approved colours.
- Check 4 of 5What an auditor asks for
Ask for
To inspect a randomly selected wall outlet: Check the actual colour against the approved list.
Good evidence
Result would show that none are coloured salmon pink or red.
- Check 5 of 5What an auditor asks for
Look at
Any reported non-compliant colours and follow-up actions.
Good evidence
Includes records of corrective measures taken for any found issues.
Mappings
Closest match in ISO/IEC 27001: A.5.13, Labelling of information, which this control partially meets.
ISO/IEC 27001: 2 mappings
This control partially meets A.5.13.
ISM-1107 requires that Non-classified, OFFICIAL: Sensitive and PROTECTED wall outlet boxes are not coloured salmon pink or red to avoid misleading classification cues in facilities. Annex A 5.13 requires the organisation to implement procedures for information labelling in accordance with its classification scheme, which can include prescribed visual identifiers and rules preventing confusing or incorrect markings. ISM-1107 is a specific, prescriptive instance of a labelling/marking rule applied to a particular physical item, whereas Annex A 5.13 governs labelling procedures across information and associated assets more broadly.
This control partially meets A.7.3.
ISM-1107 mandates a facility visual-identification convention by prohibiting salmon pink or red colouring on certain wall outlet boxes to prevent misinterpretation of security classification within work areas. Annex A 7.3 requires physical security for offices, rooms and facilities to be designed and implemented, which includes establishing and enforcing consistent physical security cues and site standards that reduce human error and incorrect handling in secured environments. ISM-1107 is one concrete facility-standard rule within the broader physical security design and implementation activities covered by Annex A 7.3.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.