ASD ISM 1729 Storage classification of media waste particles
What it says
The resulting media waste particles from the destruction of TOP SECRET media is stored and handled as OFFICIAL if less than or equal to 3 mm, or SECRET if greater than 3 mm and less than or equal to 9 mm.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishStore destroyed TOP SECRET media waste as OFFICIAL if under 3 mm, or as SECRET if 3-9 mm.
When you destroy classified documents or data that was once labelled as TOP SECRET, the leftover bits must be stored carefully based on how small they are. If they're the size of crumbs, you treat them like regular documents, but if they're bigger, they need a bit more protection. This matters because it prevents the wrong information from getting out and keeps everything secure.
Free. Save your status, tasks and notes.
Why it matters
Misclassifying TOP SECRET media waste particles (<=3 mm OFFICIAL, >3-9 mm SECRET) can lead to under-protection, exposure and compromise.
How to implement
Office Manager: Ensure staff understand that storage of media waste from TOP SECRET documents is dependent on the particle size after shredding.
Train them to distinguish between particles under 3mm and those between 3mm and 9mm.
Office Staff: When shredding sensitive documents, measure the resulting particle size.
Use a simple plastic ruler to check if the particles are less than or equal to 3mm.
IT Team: Set up a shredding protocol that specifies the settings for the shredders to produce particles of no more than 3mm.
Ensure that all shredders are maintained and calibrated regularly.
Record-Keeping Staff: Maintain a log of all shredded media including the date, type of media, and the size of particles.
Ensure this log is regularly reviewed for accuracy.
Security Officer: Regularly review and update the procedures for shredding and storing media waste, taking into account the latest guidelines and ensuring that all equipment is compliant with the stated requirements.
Keep it running
Measure and log shred/granulation particle size per batch; store <=3 mm waste as OFFICIAL and >3 mm to <=9 mm as SECRET, segregated and labelled.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
The shredding protocol document: Request the document detailing how media waste is to be handled.
Look at
How it defines particle size requirements for different classifications.
Good evidence
Includes clear instructions on measuring particles and different handling procedures for various sizes.
- Check 2 of 5What an auditor asks for
Ask for
Maintenance records of shredders: Request logs of maintenance and calibration.
Look at
Regular entries and confirmation that shredders are capable of producing specified particle sizes.
Good evidence
Shows regular maintenance checks with specific attention to particle size capability.
- Check 3 of 5What an auditor asks for
Ask for
Training records: Request evidence of staff training on media waste procedures.
Look at
The frequency of training and whether it includes specific instructions on measuring and handling particles.
Good evidence
Includes up-to-date training logs and tests of staff understanding.
- Check 4 of 5What an auditor asks for
Ask for
The media waste storage log: Request a record that documents destruction events, the particle sizes, and storage actions taken.
Look at
Accurate records that match the storage classifications.
Good evidence
Consists of well-maintained logs with no gaps or inconsistencies.
- Check 5 of 5What an auditor asks for
Ask for
Security procedure reviews: Request documentation of when and how often shredding and storage procedures are reviewed.
Look at
Evidence of consistent updates reflecting current security requirements.
Good evidence
Includes recent review dates and notes on any changes made.
Mappings
Closest match in ISO/IEC 27001: A.5.12, Information classification policy and practices, which this control partially meets.
ISO/IEC 27001: 3 mappings
This control partially meets A.5.12.
ISM-1729 mandates specific classification outcomes for TOP SECRET destruction residues based on measurable particle sizes. This is an application of Annex A 5.12, which requires information to be classified according to business/security needs and interested party requirements. ISM-1729 provides a concrete classification rule for a particular scenario, while Annex A 5.12 is broader policy/practice covering all information assets and classification decisions.
This control partially meets A.7.10.
ISM-1729 requires organisations to store and handle TOP SECRET media destruction waste at a downgraded classification based on particle size thresholds (≤3 mm as OFFICIAL; >3 mm to ≤9 mm as SECRET). This relates directly to Annex A 7.10, which requires storage media to be managed across its lifecycle (including disposal) in line with the organisation's classification and handling scheme. ISM-1729 is a highly specific, prescriptive rule for a particular disposal by-product, whereas Annex A 7.10 is broader and principles-based across all media types and lifecycle stages.
This control partially overlaps A.7.14.
ISM-1729 specifies how destroyed TOP SECRET media waste particles must be classified, stored, and handled after destruction based on particle size. Annex A 7.14 addresses secure disposal or re-use of equipment by ensuring sensitive data is removed or securely overwritten prior to disposal or re-use. They overlap in the disposal end-state and the need to prevent compromise during disposal, but ISM-1729 is about post-destruction waste handling classification, while Annex A 7.14 focuses on sanitisation prior to disposal/re-use rather than how destruction residues are classified and stored.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.