ASD ISM 2069 Maintain register of authorised recording devices in SECRET and TOP SECRET areas

The site security manager creates a written register that lists every photographic and video recording device approved for use in SECRET and TOP SECRET areas, capturing for each one a unique identifier (such as a serial or asset number), the device type, who it is assigned to, and the date it was authorised.

The person who approves access decides and documents the rules for granting authorisation, so a device is only added to the register after a named approver signs off, and any phone, camera or recorder not on the register is treated as prohibited in those areas.

The security team puts the register into day-to-day use by checking devices against it at entry points to SECRET and TOP SECRET areas, and by removing or updating an entry the moment a device is reassigned, returned or decommissioned.

The register owner schedules regular verification (for example quarterly) where they physically reconcile the listed devices against what is actually present and authorised, and records the date, who performed it, and any discrepancies found and fixed.

Management stores the register securely with controlled access, keeps previous versions, and assigns a named owner responsible for keeping it accurate so it does not drift out of date between checks.