policyASD ISM

Guidelines for data transfers

14 controls in this part of theInformation Security Manual (ISM). Each control links to plain-English guidance, audit tips and cross-framework mappings.

Data transfers

ISM-0657

Scanning Data for Threats Before Manual Import

Ensure data is checked for viruses and threats before being imported into systems.

ISM-0660

Monthly Verification of Data Transfer Logs for SECRET Systems

Check logs every month to ensure safe data transfers in top-secret systems.

ISM-0661

User Accountability for Data Transfers

Users are responsible for the data they move between systems.

ISM-0663

Develop and Maintain Data Transfer Procedures

Ensure data transfers are securely conducted with proper procedures in place.

ISM-0664

Authorisation of Secret Data Exports

Ensure data from high-security systems is checked and approved before export.

ISM-0665

Verification Required for Exporting Secret Data

Only verified and authorised people or services can handle SECRET or TOP SECRET data exports.

ISM-0669

Security Measures for Manual Data Export

Check signatures and keywords when exporting data at SECRET or TOP SECRET levels.

ISM-0675

Ensure Data Exports are Digitally Signed

Data from SECRET and TOP SECRET systems must be signed by a trusted source before export.

ISM-1187

Check Data for Improper Markings Before Export

When exporting data manually, ensure it doesn't have improper protective markings.

ISM-1294

Partial Monthly Verification of Data Transfer Logs

Data transfer logs are checked monthly to ensure some accuracy and compliance.

ISM-1535

Prevent Unsuitable Foreign Data Exports

Ensure processes are in place to block export of sensitive data to foreign systems.

ISM-1586

Record All Data Imports and Exports

Keep logs to track every time data is transferred into or out of the system.

ISM-1778

Quarantine Security-Noncompliant Data for Review

Noncompliant data is quarantined for review before system entry when imported manually.

ISM-1779

Quarantine Data Failing Security Checks During Manual Export

Data failing security checks during manual export is quarantined until reviewed for approval.

Back to the full ACSC ISM control list, or browse the complete control library.

Guidelines for data transfers

Data transfers

Control status

New task