ASD ISM 1725 Methods for destroying magnetic tapes
What it says
Magnetic tapes are destroyed using a furnace/incinerator, hammer mill, disintegrator, degausser or by cutting.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishMagnetic tapes should be destroyed using specific methods like incineration or degaussing to ensure security.
When you have information stored on magnetic tapes, like old audio or data storage tapes, it's crucial to dispose of them properly when they are no longer needed. If you don't destroy these tapes securely, sensitive business data could fall into the wrong hands, leading to exposure of confidential information or misuse of data.
Free. Save your status, tasks and notes.
Why it matters
If magnetic tapes aren't destroyed via incineration, degaussing, disintegration or cutting, sensitive data may be recovered and leaked.
How to implement
IT staff should organise the secure destruction of magnetic tapes once they are no longer needed.
Check all stored magnetic tapes, gather them, and schedule a regular destruction event to ensure tapes aren't left lying around.
A manager should assess whether any of the data on magnetic tapes needs to be kept.
This can be done by reviewing the data retention policy, identifying the contents of the tapes, and deciding if they are ready for destruction.
The IT team should choose a destruction method that matches the type of tapes being used.
They can use degaussing to erase data, or physically destroy the tapes using a hammer mill or incinerator, ensuring no data can be retrieved.
HR or management should train staff on the importance of destroying magnetic tapes correctly.
Schedule training sessions that cover risks of data exposure and demonstrate how to securely destroy tapes.
Procurement should ensure that any third-party service hired for tape destruction is reputable.
They need to check the company's credentials, read reviews, and confirm they follow industry standards for data destruction.
Keep it running
Use only approved tape-destruction methods (incinerator, degausser, hammer mill/disintegrator or cutting) and record batch, date and result.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
The log of magnetic tape destruction: Request records showing dates when tapes were scheduled for destruction.
Look at
The dates and methods used.
Good evidence
Shows consistent, regular destruction using approved methods.
- Check 2 of 5What an auditor asks for
Ask for
To see the data retention policy: Check if it includes guidelines for how long to keep magnetic tapes.
Look at
Specific instructions regarding retention timeframes and disposal procedures.
Good evidence
Clearly defines retention periods and destruction methods.
- Check 3 of 5What an auditor asks for
Ask for
Any documented training sessions on tape destruction: Request a list of training dates and attendance.
Look at
Who participated and what topics were covered.
Good evidence
Includes regular training events and covers the processes and risks involved in tape destruction.
- Check 4 of 5What an auditor asks for
Ask for
A quote or contract from the tape destruction service if outsourced: Check the service details and terms.
Look at
A clear agreement that specifies destruction methods and timelines.
Good evidence
Shows that the service uses approved methods and aligns with the organisation's needs.
- Check 5 of 5What an auditor asks for
Ask for
To observe a tape destruction session: Request a demonstration of tape destruction.
Look at
Proper handling and destruction according to policy.
Good evidence
Ensures tapes are rendered unreadable and unusable during the process.
Mappings
Closest match in ISO/IEC 27001: A.7.10, Secure management of storage media, which this control partially meets.
ISO/IEC 27001: 1 mapping
This control partially meets A.7.10.
ISM-1725 requires magnetic tapes to be destroyed using approved physical or magnetic destruction methods (e.g. incineration, disintegration, degaussing, or cutting) to prevent data recovery. This relates directly to Annex A 7.10, which requires storage media to be securely managed across its lifecycle, including disposal, in line with classification and handling requirements. ISM-1725 is a specific prescriptive disposal/destruction requirement for one media type (magnetic tape), whereas Annex A 7.10 is broader lifecycle media management across many media types and scenarios.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.