ASD ISM 1109 Ensure clear plastic covers for wall outlets
What it says
Wall outlet box covers are clear plastic.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishWall outlet covers must be transparent plastic to visually inspect without obstruction.
Using clear plastic covers for wall outlets means you can see what's going on inside without taking things apart. This is important because if you can't easily inspect these outlets, hidden problems might go unnoticed, leading to potential security risks or safety hazards.
Free. Save your status, tasks and notes.
Why it matters
Opaque wall outlet covers can hide tampering or damage, increasing the risk of unnoticed security breaches or safety hazards.
How to implement
The facilities manager should ensure all wall outlets have clear plastic covers.
They can do this by checking each outlet in the building and replacing any that are not transparent with clear covers.
The procurement team should order transparent plastic covers for outlets as part of their regular maintenance supply orders.
They can find these covers through office supply vendors and make sure they are suited for the specific type of outlets used in the organisation.
The maintenance team should periodically inspect the clear plastic outlet covers to ensure they are still intact and clear.
They can set a regular schedule, such as every six months, to walk through the facility and check each cover for cracks or dirt that might obstruct visibility.
Office managers should educate staff about the importance of these clear covers during new employee orientations.
They can do this by including a brief explanation of the covers' role in facility safety and security in orientation materials.
The IT team should work with the facilities manager to ensure any network equipment connected through these outlets is easily visible.
They can label cables and connections clearly so that anyone inspecting the outlet box can quickly verify what is in use.
Keep it running
Inspect outlet box covers during routine checks to confirm they are clear plastic and intact; replace any that are painted, clouded, cracked or missing.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
A list of all outlets in the building and their current cover status.
Look at
Entries to ensure they specify clear plastic for each.
Good evidence
Will list 100% of outlets equipped with clear plastic covers.
- Check 2 of 5What an auditor asks for
Good evidence
Record shows recent purchase orders matching the number of outlets.
- Check 3 of 5What an auditor asks for
Ask for
To see the maintenance log for outlet inspections.
Look at
Timestamps and notes about any issues found and resolved.
Good evidence
Log shows frequent checks and timely correction of any issues.
- Check 4 of 5What an auditor asks for
Look at
Segments covering the relevance of clear outlet covers.
Good evidence
Session includes clear, accurate information about their importance.
- Check 5 of 5What an auditor asks for
Ask for
To see records of IT and facilities team discussions regarding outlet visibility. Review emails or meeting notes for references to collaboration efforts.
Good evidence
Record includes decisions made on maintaining clear visibility of equipment connections.
Mappings
Closest match in ISO/IEC 27001: A.7.8, Equipment siting and protection, which this control partially meets.
ISO/IEC 27001: 1 mapping
This control partially meets A.7.8.
ISM-1109 requires wall outlet box covers to be clear plastic so the contents of the outlet box can be visually inspected for tampering or the presence of unauthorised devices. This is a specific physical protection and anti-tamper measure that fits within ISO/IEC 27001:2022 Annex A 7.8 (Equipment siting and protection), which requires equipment to be appropriately protected from physical threats and interference. Annex A 7.8 is broader because it covers many ways equipment and associated infrastructure are protected (location, shielding, physical barriers and other protections), whereas ISM-1109 prescribes one concrete design feature for a particular high-risk access point.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.