Inspect and Destroy MFD Print Drums for Toner
Check printers for leftover toner on drums or rollers and destroy them if it can't be cleaned.
Plain language
This control is about making sure any toner left on the print drums or rollers of your office printers can't be used to re-create what was printed before. This is important because leftover toner could lead to someone seeing sensitive information that was meant to stay private, like a customer's personal details or business plans.
Framework
ASD Information Security Manual (ISM)
Control effect
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
Nov 2021
Control Stack last updated
19 Mar 2026
E8 maturity levels
N/A
Official control statement
MFD print drums and image transfer rollers are inspected and destroyed if there is remnant toner which cannot be removed or a print is visible on the image transfer roller.
Why it matters
Residual toner or a visible latent image on MFD print drums/transfer rollers can expose sensitive printed content if the parts are reused, serviced or disposed of.
Operational notes
Inspect MFD drums and image transfer rollers on removal; if toner cannot be fully cleaned or a print is visible, destroy the component via approved secure disposal and record the action.
Implementation tips
- IT staff should schedule regular inspections: Assign a team member to inspect each multifunction device (MFD) for leftover toner on the print drums and rollers. This can be done by following the manufacturer’s guidelines for accessing and visually checking these components.
- Office managers should establish a cleaning protocol: Set up a routine where staff use approved cleaning kits for the MFD to try and remove any visible toner residue. Ensure all involved staff are trained in using these kits correctly to prevent damage to the equipment.
- Procurement officers should keep service contracts updated: Make sure any service agreements with printer maintenance providers include terms for physical inspection and, if needed, destruction of print drums and rollers that cannot be adequately cleaned.
- Training staff should educate on data security: Include information sessions on how information can be left on printers, why it's important to clean devices properly, and what staff should do if they notice uncleanable toner residue.
- Security officers should oversee the disposal: When printers are decommissioned or print drums need to be destroyed, coordinate with approved waste disposal companies to ensure that these items are physically destroyed and documented correctly.
Audit / evidence tips
-
Askthe cleaning schedule: Request documentation that outlines when and how printer inspections and cleaning are conducted
-
Askmaintenance records: Request service reports from any third-party provider that handles the printers
GoodReports that mention inspections and indicate compliance with agreed actions
-
Asktraining records: Request proof of training sessions provided to staff about printer sanitisation
-
Askwaste disposal records: Request documentation from the waste management company about the disposal of print drums and rollers
-
Askprocurement agreements: Request copies of service contracts with conditions about printer inspection and destruction
Cross-framework mappings
How ISM-1219 relates to controls across ISO/IEC 27001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
| layers Partially meets (1) expand_less | ||
| Annex A 7.14 | ISM-1219 requires MFD print drums and image transfer rollers to be inspected and destroyed if remnant toner cannot be removed or an image... | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.