ASD ISM 1534Remove and Destroy Printer and MFD Ribbons
Official control statement
Printer ribbons in printers and MFDs are removed and destroyed.
Quoted as published. Everything else on this page is written by Control Stack.
In plain English
Printer ribbons in printers and multifunction devices are removed and destroyed to prevent recovery of previously printed information.
What this means in practice
This control ensures that printer ribbons inside printers and multifunction devices (MFDs) are taken out and destroyed. Printer ribbons can retain a readable imprint of everything that has been printed, so an attacker could recover sensitive information from a discarded or reused ribbon. Removing and destroying the ribbons before devices are disposed of, serviced or redeployed prevents that information from being recovered.
Framework
ASD Information Security Manual (ISM)
Control effect (Control Stack)
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
Sept 2018
Control Stack last updated
29 Sept 2026
E8 maturity levels
N/A
Topic
Sanitising printers and multifunction devices
Why it matters
If printer ribbons are not removed and destroyed, the imprint of previously printed sensitive information can be recovered from discarded or reused devices, leading to unauthorised disclosure.
Operational notes
Build ribbon removal and destruction into every printer and MFD decommissioning workflow so it happens consistently whenever a device is retired, serviced or reassigned.
Implementation tips
- ICT staff remove printer ribbons from printers and multifunction devices before the devices are disposed of, returned to a supplier or transferred outside the organisation.
- Destroy each removed ribbon using an approved method such as shredding or incineration that renders the imprinted material unrecoverable.
- Add ribbon removal and destruction as a mandatory step in the decommissioning and sanitisation checklist for all printing devices.
- Record every destroyed ribbon in a register capturing the device, the date and the person responsible, and retain destruction certificates when a third party carries out the destruction.
- Train staff who handle printers and MFDs to recognise ribbon-based devices and to follow the removal and destruction procedure whenever such a device leaves service.
Audit / evidence tips
- AskAsk to see the procedure that requires printer and MFD ribbons to be removed and destroyed.Look atThe documented sanitisation or decommissioning procedure covering printing devices.GoodA current procedure that explicitly requires ribbons in both printers and MFDs to be removed and destroyed before disposal, return or reuse.
- AskAsk how removed ribbons are destroyed.Look atThe destruction method, equipment or third-party service used to destroy ribbons.GoodAn approved destruction method such as shredding or incineration that renders the ribbon imprint unrecoverable.
- AskAsk for records of ribbons that have been removed and destroyed.Look atDestruction registers, logs or certificates covering recently retired printers and MFDs.GoodComplete records tying each destroyed ribbon to a specific device, date and responsible person.
- AskAsk to inspect printers and MFDs awaiting disposal or redeployment.Look atDevices currently staged for disposal, return to supplier or reassignment.GoodNo ribbons remaining in devices queued for disposal or reuse, confirming removal has taken place.
- AskAsk who is responsible for removing and destroying ribbons.Look atRole assignments and staff training records for the task.GoodA named role accountable for ribbon removal and destruction, with evidence that relevant staff have been trained in the procedure.
Cross-framework mappings
How ISM-1534 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
layersPartially meets(1)expand_less | ||
| Annex A 8.12 | ISM-1534 requires a specific physical handling measure to prevent inappropriate export or leakage of sensitive data by removing and destr... | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.
Related ASD ISM controls in Information technology equipment
See all Guidelines for information technology equipment controls, or browse the full ASD ISM library.