ASD ISM 1111 Ensure fibre-optic cables replace copper cables
What it says
Fibre-optic cables are used for cabling infrastructure instead of copper cables.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishUse fibre-optic cables instead of copper to improve data security and efficiency in cabling infrastructure.
This control is about replacing older copper cables with fibre-optic ones for your data connections. Fibre-optic cables are faster and more secure, reducing the risk of data being intercepted or lost due to the vulnerabilities of older copper cables.
Free. Save your status, tasks and notes.
Why it matters
Without fibre-optic cabling, copper runs can be more easily tapped via electromagnetic leakage, increasing interception risk and data compromise.
How to implement
IT team should conduct an inventory check: Identify and list all current cabling infrastructure to understand where copper cables are still in use.
This involves checking server rooms, data centres, and office perimeters.
Procurement should coordinate with approved vendors: Purchase fibre-optic cables and necessary installation components.
Ensure suppliers adhere to quality and compliance standards recognised by the Australian Cyber Security Centre (ACSC).
IT team should plan the installation: Develop a phased plan to replace copper with fibre-optic cables, prioritising critical areas with sensitive data.
Coordinate with business units to minimise disruption.
Managers should inform staff: Ensure all employees are aware of the cabling upgrade schedule and any temporary connectivity issues.
Communication can be through email updates or staff meetings.
Facilities team should oversee the work: Monitor the installation process to ensure it adheres to the safety and technical requirements.
This involves inspecting the quality of work done and ensuring proper documentation of the new cabling layout.
Keep it running
Maintain a register of all copper cabling; schedule replacement with fibre, verify no copper remains on backbone links, and document any approved exceptions.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
The cabling inventory report: Request a document listing all cables in use before the upgrade.
Look at
The types of cable listed and locations used.
Good evidence
Shows a detailed record distinguishing copper from fibre-optic cables.
- Check 2 of 5What an auditor asks for
Ask for
Purchase orders or invoices from vendors: Review documentation related to fibre-optic cable acquisition.
Look at
Compliance with Australian standards and ACSC guidance.
Good evidence
Confirms purchase of appropriate cable types and quantities.
- Check 3 of 5What an auditor asks for
Ask for
The installation schedule and plan: Review the documented plan showing how and when the fibre-optic cables are installed.
Look at
The timeline and affected areas.
Good evidence
Includes realistic timelines and priority areas for fibre upgrades.
- Check 4 of 5What an auditor asks for
Ask for
Internal communication records: Request emails or notes related to staff alerts about the cabling changes.
Look at
Clarity and timeliness of communications.
Good evidence
Shows comprehensive communication with staff about potential impacts.
- Check 5 of 5What an auditor asks for
Ask for
A final inspection report: Check the report documenting that the cable installation meets technical and safety standards.
Look at
Verification from a qualified professional.
Good evidence
Includes sign-off from the facilities team or external inspector.
Mappings
Closest match in ISO/IEC 27001: A.7.12, Secure cabling for power and data, which this control partially meets.
ISO/IEC 27001: 1 mapping
This control partially meets A.7.12.
ISM-1111 requires organisations to use fibre-optic cables instead of copper for cabling infrastructure to reduce security and performance risks inherent in copper. ISO/IEC 27001:2022 Annex A 7.12 requires that all power and data cabling be protected from interception, interference, or damage, which includes selecting appropriate cable types and applying physical protections. ISM-1111 is a specific implementation choice (fibre over copper), while Annex A 7.12 is broader and technology-agnostic, covering any cabling and the wider set of protection measures.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.