ASD ISM 1641Ensure Degaussed Media is Physically Damaged
Official control statement
Following the use of a degausser, magnetic media is physically damaged by deforming any internal platters.
Quoted as published. Everything else on this page is written by Control Stack.
In plain English
After using a degausser, damage internal components of magnetic media to prevent data recovery.
What this means in practice
After you erase data from old magnetic storage devices like hard drives using a device called a degausser, it's important to physically damage the device to ensure that no one can recover any old data from it. This matters because if someone were to access that data, it might include sensitive information that could lead to identity theft or business secrets being exposed.
Framework
ASD Information Security Manual (ISM)
Control effect (Control Stack)
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
Mar 2022
Control Stack last updated
29 Sept 2026
E8 maturity levels
N/A
Why it matters
If degaussed media is not physically damaged, residual data may be recovered from platters, exposing sensitive information.
Operational notes
After degaussing, confirm internal platters are deformed (e.g., drilled/shredded) and record checks as part of media disposal.
Implementation tips
- The IT manager should organise a clear process for handling old magnetic media. First, gather all devices that need degaussing and label them clearly to track them through the process.
- The IT team should use a degausser to erase data from the magnetic media. Ensure the team is trained properly on the degausser's operation to maximise data erasure success.
- After degaussing, the designated disposal team member should physically damage the device, like bending or drilling through the platters inside a hard drive, to make data recovery impossible.
- Implement a checklist for each device processed to ensure the degaussing and physical damage steps are verified by a second team member, offering a double-check system to prevent mistakes.
- The office manager should set up a periodic review schedule to ensure the disposal process is being followed consistently, adjusting the process as necessary based on feedback from the disposal team.
Audit / evidence tips
- AskThe media degaussing and destruction log: Request records tracking each device processed through the degaussing and destruction stepsLook atEach entry for details like who conducted the process, the date, and confirmation of destructionGoodA complete, up-to-date log with all devices recorded and confirmed destroyed
- AskTo see the disposal procedure documentation: Obtain the written procedure for magnetic media disposalLook atClear steps outlined for degaussing and physical destructionGoodA detailed procedure document that matches actual operations observed on-site
- AskA demonstration of the degaussing process: Request a live demonstration or a video of a typical device being degaussedLook atProper handling and safe operation practices by staffGoodThe staff member correctly uses the degausser with no visible errors or safety concerns
- AskThe training records of staff involved in the process: Request evidence of relevant training for all personnel handling media disposalLook atTraining completion dates and content coveredGoodEach staff member has a recent completion certificate and training covers both degaussing and destruction techniques
- AskEvidence of tool maintenance logs: Request information on the maintenance schedule and service records for the degausserLook atThe frequency and details of maintenance activitiesGoodRegular, documented maintenance is performed, ensuring the degausser is operational and effective
Cross-framework mappings
How ISM-1641 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
layersPartially meets(2)expand_less | ||
| Annex A 7.10 | ISM-1641 mandates a specific end-of-life handling step for magnetic media: once degaussed, it must be physically damaged to defeat recovery | |
| Annex A 7.14 | ISM-1641 requires that after degaussing, magnetic media is physically damaged (e.g | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.
Related ASD ISM controls in Media
See all Guidelines for media controls, or browse the full ASD ISM library.