ASD ISM 1820 Ensure consistent cable colours for systems
What it says
Cables for individual systems use a consistent colour.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishUse the same colour cables for each separate system to avoid confusion.
This control is about making sure each system in your organisation uses cables that are all the same colour. It's important because it helps everyone quickly identify where a cable goes, reducing mistakes and downtime when equipment needs maintenance or fixing.
Free. Save your status, tasks and notes.
Why it matters
Inconsistent cable colours can cause misidentification during maintenance, leading to incorrect reconnections, prolonged outages and troubleshooting delays.
How to implement
IT manager should select standard cable colours: Decide on specific colours to be used for different systems, like using blue cables for computers and yellow for network devices.
Document these choices in an accessible guide.
Procurement staff should source the correct cables: When ordering new cables, ensure they match the standard colours decided for each system.
Keep this guide handy when making purchases.
Facilities manager should organise existing cables: Label and arrange current cables according to the new colour standards.
This might involve changing some cables to match the decided scheme.
Staff should receive training on the new cable colours: Educate everyone on recognising which colour is used for what system.
Simple posters or emails can help reinforce this information.
IT team should conduct regular reviews: Schedule checks to ensure cable colours remain consistent and correct mismatches promptly.
This should be part of regular maintenance routines.
Keep it running
Define a cable colour standard per system (power, network, console) and label both ends. Train installers, and verify colour compliance during builds and maintenance.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
The cable colour policy document: Request the official document that outlines the designated colours for each type of system.
Look at
Whether it clearly defines the colours used and for which specific systems.
Good evidence
Will be a detailed and current document with approvals.
- Check 2 of 5What an auditor asks for
Ask for
To see purchase orders for cables: Verify that recent purchases align with the designated cable colours.
Look at
Matching colours to the policy document and approval signatures for these purchases.
Good evidence
Will show consistent ordering of approved colours.
- Check 3 of 5What an auditor asks for
Ask for
Photos or a walkthrough of the cabling: Request visual proof that installed cables follow the colour scheme.
Look at
The match between actual installations and the documented policy.
Good evidence
Will clearly demonstrate compliance in all systems.
- Check 4 of 5What an auditor asks for
Ask for
Maintenance records showing colour checks: Check records of inspections or audits of the cabling colour scheme.
Look at
Regular entries showing reviews and corrective actions taken.
Good evidence
Will show recent checks with actions noted and completed.
- Check 5 of 5What an auditor asks for
Ask for
Staff training records: Request documentation that shows staff have been informed about the cable colour standards.
Look at
Whether all relevant staff have received and understood the training.
Good evidence
Will be a record of training events with staff signatures.
Mappings
Closest match in ISO/IEC 27001: A.7.12, Secure cabling for power and data, which this control supports.
ISO/IEC 27001: 1 mapping
This control supports A.7.12.
ISM-1820 requires cables for individual systems to use a consistent colour so they can be readily identified. Consistent colouring supports Annex A 7.12 by making it easier to inspect cabling, detect unauthorised or incorrect connections and avoid interference between systems, which contributes to protecting cables from interception, interference or damage. Annex A 7.12 addresses the full protection of power and data cabling, whereas ISM-1820 covers only cable identification by colour.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.