ASD ISM 1220 Inspect and destroy retained images on printer platens
What it says
Printer and MFD platens are inspected and destroyed if any text or images are retained on the platen.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishCheck printer surfaces, and destroy them if they have any leftover text or images.
This control is about inspecting the glass surface of your office printer or multifunction device for any leftover copies of documents. If documents or images are left on the printer, it poses a privacy risk-imagine sensitive information accidentally being copied or seen by someone who shouldn't have access.
Free. Save your status, tasks and notes.
Why it matters
Retained images on printer/MFD platens can expose sensitive documents to unauthorised personnel, causing data leakage and privacy breaches.
How to implement
The office manager should schedule regular inspections of printer platens.
Train staff to check for visible text or images after jobs to prevent data exposure.
Assign an IT team member to lead a monthly sanitisation check.
They need to clean the printer platens, ensuring no residue images remain, using soft cloths and approved cleaners.
Office staff should be reminded to clear any documents immediately after copying.
Notice prompts can be placed near machines to help enforce this habit.
Plan for immediate removal if sensitive data is found.
The IT team should have a protocol for erasing any retained data and preventing future issues.
Managers should oversee the formation of a quick response team.
Their task is to ensure data that might be retained is properly cleared or destroyed, possibly by consulting the printer's manual or technical support.
Keep it running
Inspect printer/MFD platens routinely; if any ghosted text/images are present, securely destroy the retained image and clean the platen.
Evidence and audit
- Check 1 of 4What an auditor asks for
Ask for
A record of inspection schedules: Request to see documents scheduling regular printer checks.
Look at
Dates and signatures confirming completion.
Good evidence
Record will show regular checks were performed as planned.
- Check 2 of 4What an auditor asks for
Ask for
To see the IT team's cleaning procedures.
Look at
Step-by-step instructions on how they clean platens. Good evidence would include clear directions and material lists used.
- Check 3 of 4What an auditor asks for
Ask for
Emails or notices sent to remind staff about platen checks. Verify the frequency and content match policy. Good evidence shows regular reminders with detailed instructions.
Look at
Logs of incidents where sensitive data was left on platens. Good records will detail the incident, actions taken, and how prevention measures were improved.
- Check 4 of 4What an auditor asks for
Ask for
To see staff training materials: Request copies of guides or materials used in teaching staff about this process. Good evidence would have detailed steps with who is responsible for actions.
Mappings
Closest match in ISO/IEC 27001: A.7.14, Secure disposal or re-use of equipment, which this control partially meets.
ISO/IEC 27001: 1 mapping
This control partially meets A.7.14.
ISM-1220 requires organisations to inspect printer and MFD platens and destroy them if any text or images are retained. This relates to Annex A 7.14 because retained images on a platen represent residual sensitive information on equipment that must be removed or securely eliminated before disposal or re-use. Annex A 7.14 is broader, covering all equipment containing storage media and the full disposal/re-use process, whereas ISM-1220 is a specific physical residual-information control for printer platen surfaces.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.