ASD ISM 1216 Ensure correct labelling of non-conformant cables
What it says
SECRET and TOP SECRET cables with non-conformant cable colouring are banded with the appropriate colour and labelled at inspection points.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishNon-standard cable colours for SECRET and TOP SECRET must be labelled correctly at inspection points.
This control is about making sure cables that carry top secret information are marked correctly if they don't follow standard colour rules. This is important because if these cables aren't marked, someone could accidentally tap into or mishandle sensitive information, leading to security breaches or data leaks.
Free. Save your status, tasks and notes.
Why it matters
If non-conformant SECRET/TOP SECRET cable colouring isn't correctly banded and labelled at inspection points, cables may be misidentified, increasing exposure risk.
How to implement
IT team should identify cables carrying SECRET and TOP SECRET information within the organisation.
They can do this by reviewing the documentation of the existing cabling infrastructure to know which cables are meant for high-level secret data.
Facilities manager should ensure that non-standard coloured cables are clearly marked with the prescribed band colours.
They can achieve this by using banding materials that are visible and consistent with the specified standards.
The IT security officer should set up regular inspection points for cable checks.
This involves scheduling periodic visual inspections where cables are examined to ensure all are properly labelled and marked at accessible points.
Office manager should maintain an inventory record of all cables used for sensitive information.
This record should detail the location, type, and banding status of the cables and be updated after each inspection.
Training coordinator should organise workshops to educate staff on the importance of non-standard cable marking for secret information.
They can do this by inviting a cyber security expert to explain the risks associated with improper cable handling.
Keep it running
At defined inspection points, verify each non-conformant SECRET/TOP SECRET cable has the correct colour banding and clear label; replace missing/incorrect bands immediately.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
The cable inventory list.
Look at
The details of cable types, colours and their marked status.
Good evidence
Includes a complete list with all non-standard coloured cables properly documented with their inspection points noted.
- Check 2 of 5What an auditor asks for
Look at
The frequency of inspections and the observations noted.
Good evidence
Shows regular inspections with corrective actions taken as needed.
- Check 3 of 5What an auditor asks for
Ask for
To see photographs or samples of the marked cables.
Look at
Whether the banding is clearly visible and consistent with the required colour standards.
Good evidence
Includes evidence that the banding is bright and easily identifiable.
- Check 4 of 5What an auditor asks for
Look at
Which staff attended training sessions on cable management.
Good evidence
Includes attendance records showing sessions were conducted with relevant staff in attendance.
- Check 5 of 5What an auditor asks for
Ask for
A policy document on cable handling procedures.
Look at
The guidelines for marking and managing cables.
Good evidence
Includes a clear policy document with steps and responsibilities outlined for cable management and markings.
Mappings
Closest match in ISO/IEC 27001: A.5.13, Labelling of information, which this control partially meets.
ISO/IEC 27001: 1 mapping
This control partially meets A.5.13.
ISM-1216 requires SECRET and TOP SECRET cables that do not use conformant colouring to be banded with the correct colour and labelled at inspection points. ISO/IEC 27001:2022 Annex A 5.13 requires an organisation to define and implement procedures for labelling in line with its classification scheme, which can include physical assets and media where applicable. ISM-1216 is a highly specific, physical implementation case of classification labelling, while Annex A 5.13 is broader and procedural across information types.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.