ASD ISM 1534Remove and Destroy Printer and MFD Ribbons
Printer ribbons in printers and multifunction devices are removed and destroyed to prevent recovery of previously printed information.
Plain language
This control ensures that printer ribbons inside printers and multifunction devices (MFDs) are taken out and destroyed. Printer ribbons can retain a readable imprint of everything that has been printed, so an attacker could recover sensitive information from a discarded or reused ribbon. Removing and destroying the ribbons before devices are disposed of, serviced or redeployed prevents that information from being recovered.
Framework
ASD Information Security Manual (ISM)
Control effect
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
Sept 2018
Control Stack last updated
10 Aug 2026
E8 maturity levels
N/A
Official control statement
Printer ribbons in printers and MFDs are removed and destroyed.
Why it matters
If printer ribbons are not removed and destroyed, the imprint of previously printed sensitive information can be recovered from discarded or reused devices, leading to unauthorised disclosure.
Operational notes
Build ribbon removal and destruction into every printer and MFD decommissioning workflow so it happens consistently whenever a device is retired, serviced or reassigned.
Implementation tips
- ICT staff remove printer ribbons from printers and multifunction devices before the devices are disposed of, returned to a supplier or transferred outside the organisation.
- Destroy each removed ribbon using an approved method such as shredding or incineration that renders the imprinted material unrecoverable.
- Add ribbon removal and destruction as a mandatory step in the decommissioning and sanitisation checklist for all printing devices.
- Record every destroyed ribbon in a register capturing the device, the date and the person responsible, and retain destruction certificates when a third party carries out the destruction.
- Train staff who handle printers and MFDs to recognise ribbon-based devices and to follow the removal and destruction procedure whenever such a device leaves service.
Audit / evidence tips
- AskAsk to see the procedure that requires printer and MFD ribbons to be removed and destroyed.GoodA current procedure that explicitly requires ribbons in both printers and MFDs to be removed and destroyed before disposal, return or reuse.
- AskAsk how removed ribbons are destroyed.GoodAn approved destruction method such as shredding or incineration that renders the ribbon imprint unrecoverable.
- AskAsk for records of ribbons that have been removed and destroyed.GoodComplete records tying each destroyed ribbon to a specific device, date and responsible person.
- AskAsk to inspect printers and MFDs awaiting disposal or redeployment.GoodNo ribbons remaining in devices queued for disposal or reuse, confirming removal has taken place.
- AskAsk who is responsible for removing and destroying ribbons.GoodA named role accountable for ribbon removal and destruction, with evidence that relevant staff have been trained in the procedure.
Cross-framework mappings
How ISM-1534 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
layersPartially meets(1)expand_less | ||
| Annex A 8.12 | ISM-1534 requires a specific physical handling measure to prevent inappropriate export or leakage of sensitive data by removing and destr... | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.
Related ASD ISM controls in Information technology equipment
See all Guidelines for information technology equipment controls, or browse the full ASD ISM library.