Physical security

search account_circle

policyASD ISM

Guidelines for physical security

19 controls in this part of theASD ISM. Each control links to plain-English guidance, audit tips and cross-framework mappings.

Facilities and systems

Prevent Unauthorised Viewing of System Displays

Ensure that unauthorised individuals can't see computer screens or keyboards in secure areas.

Prevent Unauthorised RF and IR Device Entry

Ensure no unauthorised RF or IR devices are brought into high-security areas.

Secure Facilities Based on System Classification

Ensure classified systems are in facilities suitable for their security needs.

Ensure Secure Access to Critical Infrastructure

Make sure rooms with servers and security equipment are always locked or secured.

Detect Unauthorised RF Devices in Secure Areas

Use security measures to find and handle unauthorised RF devices in secure zones.

Secure Physical Access for Classified Equipment

Ensure physical security for critical equipment based on its classification.

Controlling Access to Critical IT Infrastructure

Ensure keys to server and communication rooms are securely managed.

Protect Network Devices in Public Areas

Ensure network devices in public areas are secure from damage and unauthorised access.

Secure Classified Equipment in Suitable Security Containers

Keep classified IT equipment in secure containers based on their classification and location's secur

Secure Facilities for Non-Classified Systems

Ensure non-classified systems are located in secure buildings to prevent unauthorised access.

Securing Non-Classified IT Equipment in Secure Rooms

Non-classified IT equipment should be placed in secure rooms to prevent unauthorized physical access

Secure Non-Classified Equipment in Safe Containers

Secure non-classified equipment in secure containers to protect against unauthorized physical access

Secure Network API Client Authentication and Authorisation

Ensure clients using network APIs for data changes are authenticated and authorised, especially if n

Control Access to Recording Devices in Secure Areas

Prevent unauthorised devices from entering areas where sensitive information is kept.

Facilities and Systems

Register for RF and IR Devices in Secret Areas

Maintain a register of RF and IR devices for secure areas to ensure authorised use.

Authorised Medical Device Register for SECRET and TOP SECRET Areas

Keep, maintain and regularly check an approved list of medical devices allowed into SECRET and TOP S

Criteria for Medical Devices in SECRET and TOP SECRET Areas

Medical devices in secure areas must be safe, approved, and have limited connectivity.

Maintain Register of Authorised Recording Devices in SECRET and TOP SECRET Areas

Keep a maintained, regularly verified register of every photographic and video recording device auth

IT equipment and media

Ensure Security of Unused IT Equipment and Media

IT equipment and media are protected against unauthorized access when not actively being used.

Back to the full Australian Government Information Security Manual control list, or browse the complete control library.