ASD ISM 1725Methods for Destroying Magnetic Tapes
Official control statement
Magnetic tapes are destroyed using a furnace/incinerator, hammer mill, disintegrator, degausser or by cutting.
Quoted as published. Everything else on this page is written by Control Stack.
In plain English
Magnetic tapes should be destroyed using specific methods like incineration or degaussing to ensure security.
What this means in practice
When you have information stored on magnetic tapes, like old audio or data storage tapes, it's crucial to dispose of them properly when they are no longer needed. If you don't destroy these tapes securely, sensitive business data could fall into the wrong hands, leading to exposure of confidential information or misuse of data.
Framework
ASD Information Security Manual (ISM)
Control effect (Control Stack)
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
Mar 2022
Control Stack last updated
29 Sept 2026
E8 maturity levels
N/A
Why it matters
If magnetic tapes aren't destroyed via incineration, degaussing, disintegration or cutting, sensitive data may be recovered and leaked.
Operational notes
Use only approved tape-destruction methods (incinerator, degausser, hammer mill/disintegrator or cutting) and record batch, date and result.
Implementation tips
- IT staff should organise the secure destruction of magnetic tapes once they are no longer needed. Check all stored magnetic tapes, gather them, and schedule a regular destruction event to ensure tapes aren't left lying around.
- A manager should assess whether any of the data on magnetic tapes needs to be kept. This can be done by reviewing the data retention policy, identifying the contents of the tapes, and deciding if they are ready for destruction.
- The IT team should choose a destruction method that matches the type of tapes being used. They can use degaussing to erase data, or physically destroy the tapes using a hammer mill or incinerator, ensuring no data can be retrieved.
- HR or management should train staff on the importance of destroying magnetic tapes correctly. Schedule training sessions that cover risks of data exposure and demonstrate how to securely destroy tapes.
- Procurement should ensure that any third-party service hired for tape destruction is reputable. They need to check the company's credentials, read reviews, and confirm they follow industry standards for data destruction.
Audit / evidence tips
- AskThe log of magnetic tape destruction: Request records showing dates when tapes were scheduled for destructionLook atThe dates and methods usedGoodShows consistent, regular destruction using approved methods
- AskTo see the data retention policy: Check if it includes guidelines for how long to keep magnetic tapesLook atSpecific instructions regarding retention timeframes and disposal proceduresGoodClearly defines retention periods and destruction methods
- AskAny documented training sessions on tape destruction: Request a list of training dates and attendanceLook atWho participated and what topics were coveredGoodIncludes regular training events and covers the processes and risks involved in tape destruction
- AskA quote or contract from the tape destruction service if outsourced: Check the service details and termsLook atA clear agreement that specifies destruction methods and timelinesGoodShows that the service uses approved methods and aligns with the organisation's needs
- AskTo observe a tape destruction session: Request a demonstration of tape destructionLook atProper handling and destruction according to policyGoodEnsures tapes are rendered unreadable and unusable during the process
Cross-framework mappings
How ISM-1725 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
layersPartially meets(1)expand_less | ||
| Annex A 7.10 | ISM-1725 requires magnetic tapes to be destroyed using approved physical or magnetic destruction methods (e.g | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.
Related ASD ISM controls in Media
See all Guidelines for media controls, or browse the full ASD ISM library.