ASD ISM 1517Microform Destruction Using Fine Powder Method
Official control statement
Equipment that is capable of reducing microform to a fine powder, with resultant particles not showing more than five consecutive characters per particle upon microscopic inspection, is used to destroy microfiche and microfilm.
Quoted as published. Everything else on this page is written by Control Stack.
In plain English
Machines destroy microfiche by turning them into fine powder so no more than five characters remain per fragment.
What this means in practice
This control requires that any documents stored on microfiche or microfilm are destroyed by turning them into a fine powder, so you can't read more than a handful of letters or numbers from any single piece. This is important because if old or sensitive documents aren't destroyed properly, there's a risk someone could steal or misuse the information, leading to breaches of privacy, financial loss, or harm to your reputation.
Framework
ASD Information Security Manual (ISM)
Control effect (Control Stack)
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
Sept 2018
Control Stack last updated
29 Sept 2026
E8 maturity levels
N/A
Why it matters
Failure to properly destroy microfiche can lead to data leaks, as fragments may be reassembled and sensitive information exposed.
Operational notes
Service and calibrate microform destruction equipment on schedule to ensure it reduces microfiche/microfilm to fine powder, with no particle showing more than five consecutive characters.
Implementation tips
- Facility managers should ensure they have the right equipment: Identify whether the organisation has a machine that can pulverise microfiche and microfilm into fine powder. If you don't have one, consult with reputable suppliers for purchasing or outsourcing the destruction process to a certified provider.
- Procurement teams should choose recognised suppliers: When purchasing or hiring a service for destroying microform, select from vendors who guarantee the destruction method meets the required standard. Verify their credentials and request references to ensure credibility.
- Office managers need to establish handling and logging procedures: Develop a procedure for tracking and securely transporting microfiche and microfilm to the destruction site. Maintain a log of items scheduled for destruction, ensuring traceability from storage to final destruction.
- Staff training teams should educate employees: Organise training for staff handling microfiche destruction on how to securely manage and prepare media, emphasising the importance of tracking and procedure adherence.
- Quality control personnel should monitor processes: Regularly review the destruction process by physically inspecting destroyed samples under a microscope to confirm compliance with the control's requirement. Document each inspection for accountability.
Audit / evidence tips
- AskThe list of equipment used for destruction: Request documentation on the specific machines or services used for reducing microform to powderLook atThe model numbers and specifications to ensure they match the control requirementsGoodThe organisation uses machinery capable of reducing microform to no more than five characters visible per fragment
- AskVendor compliance certificates: Request proof of compliance from any external vendors involved in microform destructionLook atIndustry certifications or third-party audit reports confirming adherence to standardsGoodAll vendors provide up-to-date compliance certificates and customer references
- AskThe destruction log records: Review records of microfiche and microfilm destruction actionsLook atComplete entries detailing what was destroyed and by whomGoodLogs are complete, clearly document the lifecycle of each piece from handling to destruction, and match microfiche records
- AskEmployee training records: Review records showing when staff were trained in secure destruction practicesLook atDated training attendance sheets or certification of completionGoodComplete training records showing all relevant staff have received up-to-date training within the last year
- AskTo observe inspection process: Request a demonstration of the sample inspection process for destroyed microformLook atA structured inspection that follows documented proceduresGoodObserved inspection uses a microscope to confirm compliance, with findings recorded immediately and ranged samples checked
Cross-framework mappings
How ISM-1517 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
layersPartially meets(1)expand_less | ||
| Annex A 7.10 | ISM-1517 requires microfiche and microfilm to be destroyed using equipment that reduces the microform to a fine powder, with no particle ... | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.
Related ASD ISM controls in Media
See all Guidelines for media controls, or browse the full ASD ISM library.