ASD ISM 1287 Ensure gateway and CDS file content sanitisation

System owners should work with IT staff to identify all gateways and Cross Domain Solutions (CDSs) where files enter or exit the organisation.

This can be done by reviewing network diagrams and data flow maps to ensure all potential entry and exit points are covered.

IT teams need to choose appropriate content sanitisation tools to clean files.

They can look up recommendations from the Australian Cyber Security Centre (ACSC) or consult with experts to select tools that specifically remove viruses and strip harmful elements from files.

Managers should set policies specifying that all files go through these selected tools before being used or sent out.

This means establishing clear guidelines that staff must follow to submit files for sanitisation during regular workplace activities.

IT staff are tasked with configuring the tools to automatically process files as they pass through gateways.

This involves setting up the tools to work continuously in the background without needing constant supervision, ensuring no file goes unchecked.

Office managers should conduct regular training sessions to remind all employees about the importance of this process.

Using real-world examples of what could happen if harmful files get through can reinforce why they need to follow the process.