Search

Categories

System Hardening Gateways Cryptography Networking System Management Communications Infrastructure Personnel Security Media Enterprise Mobility Software Development Communications Systems Procurement and Outsourcing Email Information Technology Equipment Cyber Security Roles Database Systems Cyber Security Incidents Data Transfers System Monitoring ICT Equipment

16 controls

Data Transfers

ISM-0657

When manually importing data to systems, the data is scanned for malicious and active content.

ISM-0658

When manually importing data to SECRET and TOP SECRET systems, the data undergoes data formatting checks.

ISM-0660

Data transfer logs for SECRET and TOP SECRET systems are fully audited at least monthly.

ISM-0661

Users transferring data to and from systems are held accountable for data transfers they perform.

ISM-0663

Data transfer processes, and supporting data transfer procedures, are developed, implemented and maintained.

ISM-0664

Data exported from SECRET and TOP SECRET systems is reviewed and authorised by a trusted source beforehand.

ISM-0665

Trusted sources for SECRET and TOP SECRET systems are limited to people and services that have been authorised as such by an organisation’s Chief Information Security Officer.

ISM-0669

When manually exporting data from SECRET and TOP SECRET systems, digital signatures are validated and keyword checks are performed within all textual data.

ISM-0675

Data authorised for export from SECRET and TOP SECRET systems is digitally signed by a trusted source.

ISM-0678

When exporting AUSTEO or AGAO data from a system, keyword searches are undertaken on all textual data and any identified data is quarantined until reviewed and approved for release by a trusted source other than the originator.

ISM-1187

When manually exporting data from systems, the data is checked for unsuitable protective markings.

ISM-1294

Data transfer logs for systems are partially audited at least monthly.

ISM-1535

Processes, and supporting procedures, are developed, implemented and maintained to prevent AUSTEO, AGAO and REL data in textual and non-textual formats from being exported to unsuitable foreign systems.

ISM-1586

Data transfer logs are used to record all data imports and exports from systems.

ISM-1778

When manually importing data to systems, all data that fails security checks is quarantined until reviewed and subsequently approved or not approved for release.

ISM-1779

When manually exporting data from systems, all data that fails security checks is quarantined until reviewed and subsequently approved or not approved for release.

Last updated October 1, 2024

The Information Security Manual and its controls are written by the Australian Cyber Security Centre.
Built with Hugo. Theme Stack designed by Jimmy