Responsible Parties should classify any media that is Media Handling connected to a system at the same level as the system, unless section of the the media connection or use is otherwise restricted to Australian Government only mode. (Controls) Responsible Parties should protect information received from ISMF Standard 19 another Agency or Australian jurisdiction according to the protective markings applied by the originating Agency or jurisdiction, regardless of media. OF MEDIA When storage media is re-purposed or disused, considerations are needed regarding the process of removing any sensitive or classified information from its storage media (e.g. to reduce its classification level). Residual digital data can remain intact, accessible or restorable even a or of ‘format’ ‘wipe’ magnetic and optical media. This may lead to inadvertent disclosure of sensitive information should the storage media be used or released into an uncontrolled environment. The same is true of assets flagged for auction or general sale outside of government. Table 2 Sanitisation and disposal – Applicability Guidance References Responsible Parties should define, document and implement formal processes and procedures, including approval ISMF Standard 60 authorities, for any activities to sanitise any reused digital information storage media, or destroy and dispose of any ISMF Standard 45 disused media commensurate with the sensitivity of the information contained on the media. Responsible Parties should ensure that specified processes and procedures for sanitisation activities observe the All classifications ISMF Standard 60 requirements for the disposal of Official Records in accordance with . Media Handling Responsible Parties should undertake sanitisation and section of the disposal activities using approved equipment, techniques, and Australian procedures in alignment with the requirements described in the Government Media Security section of the Australian Government ISM). (Controls) Media Handling Responsible Parties should track and document media section of the Sanitisation actions, and periodically review and verify Australian Sanitisation equipment/procedures for correct operation and Government performance. (Controls)
Responsible Parties should classify any media that is connected to a system at the same level as the system, unless the media connection or use is otherwise restricted to mode. Media Handling section of the Australian Government (Controls) Responsible Parties should protect information received from another Agency or Australian jurisdiction according to the protective markings applied by the originating Agency or jurisdiction, regardless of media. ISMF Standard 19 OF MEDIA When storage media is re-purposed or disused, considerations are needed regarding the process of removing any sensitive or classified information from its storage media (e.g. to reduce its classification level). Residual digital data can remain intact, accessible or restorable even a ‘format’ or ‘wipe’ of magnetic and optical media. This may lead to inadvertent disclosure of sensitive information should the storage media be used or released into an uncontrolled environment. The same is true of assets flagged for auction or general sale outside of government. Table 2 – Sanitisation and disposal Applicability Guidance References All classifications Responsible Parties should define, document and implement formal processes and procedures, including approval authorities, for any activities to sanitise any reused digital information storage media, or destroy and dispose of any disused media commensurate with the sensitivity of the information contained on the media. ISMF Standard 60 ISMF Standard 45 Responsible Parties should ensure that specified processes and procedures for sanitisation activities observe the requirements for the disposal of Official Records in accordance with . ISMF Standard 60 Responsible Parties should only undertake sanitisation and disposal activities using approved equipment, techniques, and procedures in alignment with the requirements described in the Media Security section of the Australian Government ISM). Media Handling section of the Australian Government (Controls) Responsible Parties should track and document media Sanitisation actions, and periodically review and verify Sanitisation equipment/procedures for correct operation and performance. Media Handling section of the Australian Government (Controls)