Evaluated products

search account_circle

policyASD ISM

Guidelines for evaluated products

5 controls in this part of theInformation Security Manual (ISM). Each control links to plain-English guidance, audit tips and cross-framework mappings.

Evaluated product procurement

Choose PP-evaluated Products Over EAL-based Ones

Prefer products evaluated against protection profiles over those with EAL evaluations for procuremen

Ensuring Evaluated Products Follow Delivery Procedures

Products must be delivered according to any specified delivery methods in evaluation documents.

Consult ASD for High Assurance IT Delivery Procedures

Contact ASD for delivery procedures when buying high-security IT equipment.

Evaluated product usage

Implement and Manage Evaluated Products Correctly

Ensure evaluated products are set up and run correctly following vendor instructions and evaluated s

Secure Configuration of High Assurance IT Equipment

Ensure high-grade IT gear is set up and operated per ASD standards for security.

Back to the full ACSC ISM control list, or browse the complete control library.