Search

Categories

System Hardening Gateways Cryptography Networking System Management Communications Infrastructure Personnel Security Media Enterprise Mobility Software Development Communications Systems Procurement and Outsourcing Email Information Technology Equipment Cyber Security Roles Database Systems Cyber Security Incidents Data Transfers System Monitoring ICT Equipment

6 controls

Evaluated Products

ISM-0280

If procuring an evaluated product, a product that has completed a PP-based evaluation, including against all applicable PP modules, is selected in preference to one that has completed an EAL-based evaluation.

ISM-0285

Evaluated products are delivered in a manner consistent with any delivery procedures defined in associated evaluation documentation.

ISM-0286

When procuring high assurance information technology (IT) equipment, ASD is contacted for any equipment-specific delivery procedures.

ISM-0289

Evaluated products are installed, configured, administered and operated in an evaluated configuration and in accordance with vendor guidance.

ISM-0290

High assurance IT equipment is installed, configured, administered and operated in an evaluated configuration and in accordance with ASD guidance.

ISM-0292

High assurance ICT equipment is always operated in an evaluated configuration.

Last updated October 1, 2024

The Information Security Manual and its controls are written by the Australian Cyber Security Centre.
Built with Hugo. Theme Stack designed by Jimmy