ASD ISM 1119 Ensure cables in TOP SECRET areas are inspectable
What it says
Cables in TOP SECRET areas are fully inspectable for their entire length.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishCables in highly secure areas must be checked along their entire length for any issues.
In areas where top-secret information is handled, it's crucial that all cables can be thoroughly inspected to ensure there are no vulnerabilities. If cables can't be checked properly, there's a risk that someone could tamper with them to steal or interfere with sensitive information, potentially leading to a security breach.
Free. Save your status, tasks and notes.
Why it matters
If cables in TOP SECRET areas cannot be inspected end-to-end, tampering or covert taps may go undetected, enabling data compromise and integrity loss.
How to implement
The IT team should conduct a thorough review of all cables in top-secret areas.
They need to ensure every cable is accessible and not hidden or blocked by walls or furniture, allowing for visual inspection down its entire length.
The facilities manager should work with contractors to install cable trays or conduits in top-secret areas.
This setup keeps cables organised and visible, making them easy to inspect regularly.
Security personnel should be tasked with scheduling regular inspections.
They should check for any signs of tampering or wear and immediately report any suspicious findings to IT or management.
Management should implement a checklist for inspecting cables.
This checklist can guide staff on what to look for during inspections, such as checking that cable covers are intact and no cables are damaged.
The office manager should keep an updated map of all cable routes in top-secret areas.
This map helps inspection teams know where every cable runs and supports quick response if any issues are detected.
Keep it running
Route and secure cables so the full length is visible and accessible (no concealed runs). Record periodic inspections and investigate any unviewable sections immediately.
Evidence and audit
- Check 1 of 4What an auditor asks for
Ask for
A recent cable inspection report: Request a document showing the latest inspections conducted in top-secret areas.
Look at
The inspection dates and any findings or actions taken.
Good evidence
Should show regular inspections with no untreated problems.
- Check 2 of 4What an auditor asks for
Ask for
A maintenance log: Request records tracking maintenance actions on cabling in secure areas. Check these entries include exact dates and specific tasks carried out.
Good evidence
Log lists routine checks and any repairs made promptly.
- Check 3 of 4What an auditor asks for
Look at
Descriptions of materials used and locations.
Good evidence
Record confirms thorough and professional installation supporting inspectability.
- Check 4 of 4What an auditor asks for
Ask for
About staff training records: Request documents showing training for staff involved in cable inspections. Ensure the records show proper training regarding what to look for and how to report issues.
Good evidence
Shows completed training for all relevant personnel.
Mappings
Closest match in ISO/IEC 27001: A.7.12, Secure cabling for power and data, which this control partially meets.
ISO/IEC 27001: 3 mappings
This control partially meets A.7.12.
ISM-1119 requires that cables in TOP SECRET areas are fully inspectable for their entire length to enable detection of tampering or compromise. Annex A 7.12 requires power and data cabling to be protected from interception, interference or damage, which includes physical security measures such as routing, shielding, segregation and inspection regimes. ISM-1119 is a specific physical implementation expectation (inspectability in a highest-classification area), while Annex A 7.12 is broader and applies across environments and threat types beyond inspectability alone.
This control partially overlaps A.7.5.
ISM-1119 requires cables in TOP SECRET areas to be fully inspectable for their entire length to reduce the risk of undetected physical compromise. Annex A 7.5 requires protection against physical and environmental threats to infrastructure, which may include design choices for cable routing and containment to prevent damage and facilitate maintenance/inspection. The controls overlap on protecting physical infrastructure, but Annex A 7.5 has a wider hazard focus (environmental and other threats) while ISM-1119 is specifically about inspectability to detect tampering/interception in high-security zones.
This control partially overlaps A.7.8.
ISM-1119 requires that cables in TOP SECRET areas are fully inspectable for their entire length to make tampering or illicit taps detectable. Annex A 7.8 requires equipment to be sited securely and protected, which commonly extends to associated infrastructure (including cabling routes and containment) to prevent physical compromise. The overlap is the shared physical-security objective of preventing and detecting physical interference, but Annex A 7.8 is equipment-centric while ISM-1119 is explicitly and narrowly about cable inspectability in TOP SECRET spaces.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.