ISM-1464

Where a consumer guide for evaluated encryption software exists, the sanitisation and post-sanitisation requirements stated in the consumer guide are followed.

Topic
Encrypted media sanitisation
Applicable to
all

History

Priority
must
Dec 2021
Removed
The recommendation that cryptographic products have completed an ASD Cryptographic Evaluation before being used for the protection of data at rest or in transit has been replaced with a recommendation for the use of cryptographic products that have been evaluated and certified under the Common Criteria against a Protection Profile.
2017
Agencies using cryptography suitable for reducing the handling requirements of media tounclassified, must follow the sanitisation and post-sanitisation requirements stated in theproduct guide for the cryptography used.
Control Added. No public explaination.