ISM-1970

Malicious code processed for cybersecurity incident response or research purposes is done so in a dedicated analysis environment that is segregated from other systems.

Topic
Handling and containing malicious code infections
Applicable to
Non Classified, Official, Protected, Secret, Top Secret

History

Mar 2025
Malicious code processed for cybersecurity incident response or research purposes is done so in a dedicated analysis environment that is segregated from other systems.
References to ‘cyber security’ were changed to ‘cybersecurity’ to align with Australia’s national dictionary.
Dec 2024
Malicious code processed for cyber security incident response or research purposes is done so in a dedicated analysis environment that is segregated from other systems.
A new control was added recommending that malicious code processed for cyber security incident response or research purposes is done so in a dedicated analysis environment that is segregated from other systems.