ASD ISM 1314Ensure Wireless Devices are Wi-Fi Alliance Certified
Official control statement
All wireless devices are Wi-Fi Alliance certified.
Quoted as published. Everything else on this page is written by Control Stack.
In plain English
All wireless devices must have Wi-Fi Alliance certification for security standards.
What this means in practice
This control means that any wireless devices your organisation buys or uses should have a seal of approval from the Wi-Fi Alliance. This matters because it ensures these devices stick to important security standards. Without this certification, there's a risk that the devices could have security flaws, making your network vulnerable to hackers snooping in or stealing sensitive information.
Framework
ASD Information Security Manual (ISM)
Control effect (Control Stack)
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
Sept 2021
Control Stack last updated
29 Sept 2026
E8 maturity levels
N/A
Why it matters
Without Wi‑Fi Alliance certification, Wi‑Fi devices may lack verified security and interoperability, increasing the risk of weak encryption, misconfiguration and unauthorised access.
Operational notes
Maintain an approved device register and verify Wi‑Fi Alliance certification (model/firmware) during procurement and onboarding; periodically re-check certification for fleet changes.
Implementation tips
- IT managers should create a list of all existing wireless devices currently in use and verify their certification status with the Wi-Fi Alliance. Use the Wi-Fi Alliance website to cross-check each device model.
- System administrators should educate staff involved in purchasing on the importance and recognition of the Wi-Fi Certified logo. This can be done through a simple workshop or information session highlighting the risks of using uncertified devices.
- IT teams should establish a process to regularly review and update the inventory of wireless devices, ensuring ongoing compliance. This could be done quarterly, where devices are re-checked for their certification status.
- Leadership should define and enforce a policy that prohibits the use of uncertified wireless devices within the organisation. Communicate this policy through staff meetings, emails, and inclusion in the organisation's handbook.
Audit / evidence tips
- AskThe procurement records of wireless devices: Request to see purchase orders or receipts for all wireless devices to confirm they feature Wi-Fi Alliance certificationLook atThe Wi-Fi Certified logo or related documentationGoodIncludes clear documentation showing each device's certification status
- AskThe inventory list of all wireless devices: Review this list against the Wi-Fi Alliance database. Look to ensure every device listed is verified as certifiedGoodIs when all listed devices are confirmed as certified on the Wi-Fi Alliance's site
- AskTraining materials provided to the purchasing teamLook atThe content to see if they explain the importance of Wi-Fi certificationGoodShows that staff were informed about the certification and why it matters
- AskTo see the policy on wireless device usage: Ensure it clearly mandates using Wi-Fi Certified devicesLook atSpecific language mentioning the Wi-Fi Alliance certificationGoodIncludes a documented and widely communicated policy
- AskRecords of compliance checks or auditsLook atResults from periodic checks of wireless devices to ensure ongoing complianceGoodIncludes documented evidence of regular device compliance reviews and any actions taken for non-compliance
Cross-framework mappings
How ISM-1314 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
layersPartially meets(2)expand_less | ||
| Annex A 8.20 | ISM-1314 requires that all wireless devices used by the organisation are Wi‑Fi Alliance certified | |
| Annex A 8.21 | ISM-1314 requires that all wireless devices are Wi‑Fi Alliance certified, effectively setting a minimum standard for wireless device capa... | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.
Related ASD ISM controls in Networking
See all Guidelines for networking controls, or browse the full ASD ISM library.