Microform Destruction Using Fine Powder Method
Machines destroy microfiche by turning them into fine powder so no more than five characters remain per fragment.
Plain language
This control requires that any documents stored on microfiche or microfilm are destroyed by turning them into a fine powder, so you can't read more than a handful of letters or numbers from any single piece. This is important because if old or sensitive documents aren't destroyed properly, there's a risk someone could steal or misuse the information, leading to breaches of privacy, financial loss, or harm to your reputation.
Framework
ASD Information Security Manual (ISM)
Control effect
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
Aug 2018
Control Stack last updated
19 Mar 2026
E8 maturity levels
N/A
Official control statement
Equipment that is capable of reducing microform to a fine powder, with resultant particles not showing more than five consecutive characters per particle upon microscopic inspection, is used to destroy microfiche and microfilm.
Why it matters
Failure to properly destroy microfiche can lead to data leaks, as fragments may be reassembled and sensitive information exposed.
Operational notes
Service and calibrate microform destruction equipment on schedule to ensure it reduces microfiche/microfilm to fine powder, with no particle showing more than five consecutive characters.
Implementation tips
- Facility managers should ensure they have the right equipment: Identify whether the organisation has a machine that can pulverise microfiche and microfilm into fine powder. If you don't have one, consult with reputable suppliers for purchasing or outsourcing the destruction process to a certified provider.
- Procurement teams should choose recognised suppliers: When purchasing or hiring a service for destroying microform, select from vendors who guarantee the destruction method meets the required standard. Verify their credentials and request references to ensure credibility.
- Office managers need to establish handling and logging procedures: Develop a procedure for tracking and securely transporting microfiche and microfilm to the destruction site. Maintain a log of items scheduled for destruction, ensuring traceability from storage to final destruction.
- Staff training teams should educate employees: Organise training for staff handling microfiche destruction on how to securely manage and prepare media, emphasising the importance of tracking and procedure adherence.
- Quality control personnel should monitor processes: Regularly review the destruction process by physically inspecting destroyed samples under a microscope to confirm compliance with the control's requirement. Document each inspection for accountability.
Audit / evidence tips
-
Askthe list of equipment used for destruction: Request documentation on the specific machines or services used for reducing microform to powder
GoodThe organisation uses machinery capable of reducing microform to no more than five characters visible per fragment
-
Askvendor compliance certificates: Request proof of compliance from any external vendors involved in microform destruction
GoodAll vendors provide up-to-date compliance certificates and customer references
-
Askthe destruction log records: Review records of microfiche and microfilm destruction actions
GoodLogs are complete, clearly document the lifecycle of each piece from handling to destruction, and match microfiche records
-
Askemployee training records: Review records showing when staff were trained in secure destruction practices
GoodComplete training records showing all relevant staff have received up-to-date training within the last year
-
Askto observe inspection process: Request a demonstration of the sample inspection process for destroyed microform
GoodObserved inspection uses a microscope to confirm compliance, with findings recorded immediately and ranged samples checked
Cross-framework mappings
How ISM-1517 relates to controls across ISO/IEC 27001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
| layers Partially meets (1) expand_less | ||
| Annex A 7.14 | ISM-1517 requires the secure destruction of microfiche and microfilm using equipment that reduces microform to a fine powder such that fr... | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.