ISM-0947

When transferring data manually between two systems belonging to different security domains, rewritable media is sanitised after each data transfer.

Topic
Using media for data transfers
Applicable to
all

History

Priority
recommended
Apr 2021
When transferring data manually between two systems belonging to different security domains, rewritable media is sanitised after each data transfer.
Security control 0947 was amended to align language with security control 0347 and to ensure sanitisation occurs after each data transfer when rewritable media is used.
Mar 2021
If not using write-once media for transferring data manually between two systems belonging to different security domains, the media is sanitised between each data transfer.
Aug 2020
If not using write-once media for transferring data manually between two systems belonging to different security domains, the media is sanitised between each data transfer.
Security control 0947 was moved from the media sanitisation section and amended to cover situations where rewritable media is used for manual data transfers between systems belonging to different security domains.
Jul 2020
All media is sanitised prior to reuse.
2015
Agencies should sanitise all media prior to reuse.
2010
It is recommended agencies sanitise all media prior to reuse at the same or higher classification.