ASD ISM 1721 Red colour coding for TOP SECRET outlet boxes
What it says
TOP SECRET wall outlet boxes are coloured red.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishTOP SECRET wall outlet boxes should be painted red for easy identification.
This control requires that wall outlet boxes used for TOP SECRET information be painted red to make them easy to identify. This is important because if someone accidentally connects a regular device to a TOP SECRET outlet, it could lead to sensitive information getting released by mistake.
Free. Save your status, tasks and notes.
Why it matters
Misidentified TOP SECRET outlets can lead to unauthorised data breaches if users connect devices to the wrong (non-TOP SECRET) outlet.
How to implement
The facilities manager should arrange for a professional painter to thoroughly paint the outlet boxes red.
This ensures that the outlets are clearly distinguishable to prevent accidents.
The IT team should label each TOP SECRET outlet once it is painted to reinforce its purpose.
They can use bold labels stating 'TOP SECRET ONLY' to avoid confusion.
The office manager must update internal maps and documentation to clearly indicate which outlets are designated as TOP SECRET.
This helps in case repairs or checks are needed.
Security personnel should be trained to recognise the red outlets and understand the importance of their use for TOP SECRET connections only.
A short briefing can clarify what needs to happen if they spot a non-compliant setup.
The procurement team should ensure that maintenance contracts include a provision for checking the paint condition of these outlets during routine checks.
This helps keep the marking standards consistent over time.
Keep it running
Regularly inspect TOP SECRET outlet boxes for wear, repainting, or graffiti that could obscure the required red colour coding and confuse users.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
The outlet maintenance logs: Request any records for maintenance checks specific to the red outlets.
Look at
The dates and details of each check.
Good evidence
Shows regular checks with no missed appointments.
- Check 2 of 5What an auditor asks for
Ask for
To see the internal guide map for office outlets: Request the document or system where the TOP SECRET outlets are labelled.
Look at
Clearly marked red outlets.
Good evidence
Shows every red outlet accurately labelled and updated within the last year.
- Check 3 of 5What an auditor asks for
Ask for
Details of any training sessions regarding the recognition and importance of red outlet boxes.
Look at
The list of attendees and training materials.
Good evidence
Includes a list showing high attendance and detailed, relevant content.
- Check 4 of 5What an auditor asks for
Ask for
To see procurement contracts: Review contracts with maintenance companies to ensure they include red outlet checks.
Look at
Clauses specifically mentioning wall outlet box colour checks.
Good evidence
Includes scheduled painting and checks written into the contract terms.
- Check 5 of 5What an auditor asks for
Ask for
The outlet inspection report: Request this document to see recent inspection findings on the red outlets.
Look at
The inspector's notes and any corrective actions.
Good evidence
Will have notes about outlet conditions and any improvements needed.
Mappings
Closest match in ISO/IEC 27001: A.7.12, Secure cabling for power and data, which this control partially meets.
ISO/IEC 27001: 1 mapping
This control partially meets A.7.12.
ISM-1721 requires wall outlet boxes for TOP SECRET systems to be coloured red so that the classification of each connection point is immediately visible. This supports the protection of data cabling required by Annex A 7.12, because clearly identifiable outlets reduce the risk of accidental cross-patching or unauthorised connection that could lead to interception of or interference with classified data. Annex A 7.12 covers the protection of all power, data and supporting service cabling from interception, interference or damage, while ISM-1721 addresses only the colour marking of outlets for one classification.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.