ASD ISM 1290 Controlled unpacking of archive files for filtering

IT team should ensure that archive files are unpacked in a quarantined area: Set up a specific computer or an isolated part of your network where archive files can be opened without affecting the rest of the system.

It ensures that potentially dangerous files are detected and dealt with before they interact with your primary systems.

System administrators should verify system filter configurations: Check that your content filtering systems are updated to handle newly unpacked files effectively.

This might involve regular system updates and testing with sample archive files to see how the filters react.

Managers should establish a clear policy on handling archive files: Develop guidelines that tell employees what to do if they have to open archive files.

This might involve limited access to who can unpack these files and using specialised software that performs security checks.

Training coordinators should organise regular training sessions: Educate staff on the risks of improperly unpacking archive files and how to use company-approved systems and processes.

Keep these sessions practical with scenarios and examples they might encounter in their daily work.

Procurement should work with IT to purchase and maintain approved software: Ensure that the organisation only uses tools that handle archive files safely and are vetted by cyber security experts.

This keeps proprietary data safe and reduces the risk of introducing malicious software.