Skip to content
arrow_back
ISM-1219policyASD Information Security Manual (ISM)

Inspect and Destroy MFD Print Drums and Image Transfer Rollers

Inspect multifunction device print drums and image transfer rollers, and destroy any that still hold remnant toner or show a visible print.

record_voice_over

Plain language

A multifunction device (MFD) is the office machine that prints, copies and scans. Inside it, the print drum and the image transfer roller carry the toner that forms each page, and they can keep a faint copy of what was printed. Before you dispose of, return or recycle one of these parts, someone must look at it closely and physically destroy it if any leftover (remnant) toner cannot be cleaned off or if you can still see a printed image on the roller. This stops sensitive documents from being read off the part after it leaves your control.

Framework

ASD Information Security Manual (ISM)

Control effect

Preventative

Classifications

NC, OS, P, S, TS

ISM last updated

June 2026

Control Stack last updated

18 June 2026

E8 maturity levels

N/A

Official control statement

MFD print drums and image transfer rollers are inspected and destroyed if there is remnant toner that cannot be removed or a print is visible on the image transfer roller.
policyASD Information Security Manual (ISM)ISM-1219
priority_high

Why it matters

If a print drum or image transfer roller leaves with leftover toner or a visible image, someone could read sensitive printed documents off the discarded part, exposing confidential information.

settings

Operational notes

Build the drum and roller inspection into routine MFD decommissioning and leased-device returns, and keep dated destruction records so each device's outcome can be traced later.

build

Implementation tips

  • The office manager or IT coordinator should add a step to the MFD disposal checklist requiring that the print drum and image transfer roller are removed and visually inspected before the device or part leaves the building.
  • Whoever performs the inspection should hold each part under good light and check for any remnant toner that will not wipe off and for any visible printed image on the image transfer roller, recording the result against the device serial number.
  • If toner cannot be removed or a print is still visible, the assigned staff member should physically destroy the drum and roller (for example by shredding, crushing or sending to a certified destruction service) rather than simply wiping or returning them.
  • When the MFD is leased, the business owner should write this inspect-and-destroy requirement into the lease return terms so the leasing company cannot collect parts that still carry readable images.
  • The person responsible should keep a short destruction record for each MFD, noting the date, the device, who inspected it and how the drum and roller were destroyed, and store it with other disposal paperwork.
fact_check

Audit / evidence tips

  • Askthe MFD disposal or sanitisation procedureLook atan explicit step covering inspection of the print drum and image transfer rollerGoodnames who inspects, what they check for (remnant toner that cannot be removed, a visible print on the roller) and the destruction action that follows
  • Askdestruction records for MFDs disposed of in the audit periodLook atentries tying each device to its drum and roller outcomeGoodshows every device has a matching inspection result and, where needed, a destruction record
  • Askhow staff decide whether a drum or roller must be destroyed rather than reused or returnedLook atthe test of leftover toner or a visible imageGoodmatches the control exactly: destroy if remnant toner cannot be removed or a print is visible
  • Askto see evidence of how the parts were destroyed, such as certificates from a destruction service or photosLook ata method that renders the part unreadableGoodis shredding, crushing or certified destruction, not just wiping
  • Askhow leased or returned MFDs are handledLook atthe lease return terms or supplier agreementGoodshows the inspect-and-destroy requirement applies even when the device is collected by a third party
link

Cross-framework mappings

How ISM-1219 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.

ISO 27001

ControlNotesDetails
layersPartially meets(1)expand_less
Annex A 7.14ISM-1219 requires MFD print drums and image transfer rollers to be inspected and destroyed if remnant toner cannot be removed or an image...

These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.

See all Guidelines for information technology equipment controls, or browse the full ASD ISM library.

Mapping detail

Mapping

Direction

Controls