ASD ISM 1457 Evaluate peripheral switches for security domains
What it says
Evaluated peripheral switches used for sharing peripherals between SECRET and TOP SECRET systems, or between SECRET or TOP SECRET systems belonging to different security domains, preferably complete a high assurance evaluation.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishEnsure devices used to share equipment between classified systems meet high security standards.
This control is about ensuring that when you're using devices (like switches) to share equipment (like keyboards and monitors) between high-security computers, those devices are very secure themselves. If they're not secure, they could let sensitive information from one system accidentally mix with information from another, potentially leading to data leaks or security breaches.
Free. Save your status, tasks and notes.
Why it matters
If peripheral switches aren't high-assurance evaluated, SECRET/TOP SECRET data may leak between security domains, compromising classified operations.
How to implement
IT Team should carefully choose switches: Make sure that any switch used to share peripherals between SECRET and TOP SECRET systems is from a reputable vendor known for high-security standards.
Research vendors that specialise in producing secure hardware and verify their certifications.
Procurement should verify assurance levels: When purchasing equipment, check that the switches have been evaluated to at least the high assurance level as required for sensitive systems.
Request assurance certificates from suppliers to confirm compliance.
System owners should document configurations: Record exactly how the switches are setup, which systems they connect, and their security features.
This includes ensuring no unexpected pathways exist between systems that might allow information leakage.
Train staff on secure usage: Managers should organise training sessions for staff who use these systems regularly.
Ensure they understand correct use procedures and the importance of maintaining the privacy and security of connected systems.
Conduct regular checks on switches: IT Support should regularly inspect these peripheral switches to ensure they remain in good condition and haven't been tampered with.
Include physical inspections and security setting reviews as part of routine maintenance.
Keep it running
Regularly verify high assurance evaluations for new or updated switches, ensuring they meet cross-domain security requirements.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
A list of all peripheral switches in use: Request documentation listing each switch, their model, vendor, and assurance certification.
Look at
The certification documentation attached to ensure they meet high assurance standards.
Good evidence
Documentation is complete with certificates for each switch and matches vendor claims.
- Check 2 of 5What an auditor asks for
Ask for
To see configuration records: Request records detailing how the peripheral switches are set up and connected.
Look at
Specifics on security settings and clear diagrams showing the connections.
Good evidence
Records are thorough, up-to-date, and accurately reflect current configurations.
- Check 3 of 5What an auditor asks for
Ask for
About training sessions for staff: Request evidence of training materials and sign-in sheets for training sessions.
Look at
The comprehensiveness of the training materials and attendance records.
Good evidence
Regularly scheduled training with full attendance and detailed materials covered.
- Check 4 of 5What an auditor asks for
Ask for
Recent inspection reports: Request documents from regular checks on switches for physical integrity and configuration accuracy.
Look at
The frequency and detail in the reports.
Good evidence
Reports are carried out consistently, include all switches, and note any issues found and resolved.
- Check 5 of 5What an auditor asks for
Ask for
A policy on secure use: Request the internal policy on how these switches should be securely used and maintained.
Look at
Detailed guidelines that align with the control's requirements.
Good evidence
A clear, detailed policy is in place, readily accessible, and followed by staff.
Mappings
Closest match in ISO/IEC 27001: A.8.12, Data leakage prevention measures, which this control partially meets.
ISO/IEC 27001: 2 mappings
This control partially meets A.8.12.
ISM-1457 requires evaluated peripheral switches shared between SECRET and TOP SECRET systems, or between such systems in different security domains, to preferably complete a high assurance evaluation. High assurance switches reduce the risk of information leaking between the connected systems through shared keyboards, displays and mice, which supports the data leakage prevention measures required by Annex A 8.12. Annex A 8.12 covers leakage prevention across all systems, networks and devices handling sensitive information, while ISM-1457 addresses only product assurance for peripheral switches in highly classified environments.
This control supports A.8.22.
ISM-1457 requires evaluated peripheral switches shared between SECRET and TOP SECRET systems, or between such systems in different security domains, to preferably complete a high assurance evaluation. A shared peripheral switch could otherwise bridge systems that are meant to be kept apart, so a high assurance switch helps preserve the segregation required by Annex A 8.22. Annex A 8.22 concerns segregating groups of services, users and systems within networks, whereas ISM-1457 addresses the assurance of a device that connects separately segregated systems.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.