ASD ISM 1112 Ensure cables are inspectable every five metres
What it says
Cables in non-TOP SECRET areas are inspectable every five metres or less.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishCables outside TOP SECRET areas should be easy to inspect every five metres for security checks.
This control ensures that cables used outside of highly secure areas, like TOP SECRET zones, can be easily inspected every five metres. It's important because any damage or tampering with cables could allow unauthorised access to sensitive information, leading to data breaches or security incidents.
Free. Save your status, tasks and notes.
Why it matters
Failure to inspect cables every five metres may enable undetected tampering, exposing the organisation to potential data breaches.
How to implement
Building managers should ensure that cable installations are planned with inspectability in mind.
This involves consulting with engineers to map out routes where cables can be easily inspected every five metres, placing them in areas that allow easy visual checks.
IT and maintenance teams should set up regular inspection schedules.
This means assigning team members to visually inspect each five-metre segment of cabling at routine intervals, looking for signs of wear or tampering.
Procurement teams should purchase cabling solutions that support this requirement.
They should look for products designed with access panels or points every five metres, which can make the inspection process much simpler.
Trainers or safety officers should conduct briefing sessions for staff involved in cabling maintenance.
They should explain why five-metre inspections are crucial, demonstrating how to properly check cables and what issues to look out for.
System owners should document all cabling routes and inspection points.
They need to create detailed plans and logs that are easily accessible, so any person involved in security audits can quickly verify the setup.
Keep it running
Design cable routes so all runs are visually inspectable at least every five metres (or less); add access panels/points and avoid concealed segments between inspection intervals.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
The cable layout plans: Request maps or documentation showing where all cables are laid out.
Look at
The details to ensure inspection points are marked every five metres.
Good evidence
Includes clear plans with all required inspection points highlighted.
- Check 2 of 5What an auditor asks for
Look at
The consistency of inspections carried out, noting any documentation of repairs or faults found.
Good evidence
Is a completed log showing regular checks, with any issues properly documented and addressed.
- Check 3 of 5What an auditor asks for
Ask for
Maintenance team training records: Request proof of training sessions that cover cable inspection procedures.
Look at
The dates and attendance records for these sessions.
Good evidence
Includes recent training records with most team members attending.
- Check 4 of 5What an auditor asks for
Ask for
The purchase specifications for cabling.
Look at
The criteria that demonstrate support for regular inspections, such as product details or supplier assurances.
Good evidence
Is documentation showing products that accommodate regular inspection requirements.
- Check 5 of 5What an auditor asks for
Ask for
Incident response records related to cabling: Request any recorded incidents of cable distortion or tampering.
Look at
Details on how these issues were detected and resolved.
Good evidence
Includes incident records showing prompt and effective responses to cable-related issues.
Mappings
Closest match in ISO/IEC 27001: A.7.12, Secure cabling for power and data, which this control partially meets.
ISO/IEC 27001: 1 mapping
This control partially meets A.7.12.
ISM-1112 requires cables in non-TOP SECRET areas to be physically inspectable at intervals of five metres or less to support routine security checks. ISO/IEC 27001:2022 Annex A 7.12 requires power and data cabling to be protected from interception, interference or damage, which can be achieved through a range of physical and procedural measures including routing, shielding, conduit, and inspection regimes. ISM-1112 is a prescriptive physical-installation requirement focused on inspectability frequency, whereas Annex A 7.12 is broader and outcome-focused on protecting cabling against multiple threat types.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.