Library
Australian Government ICT Security Manual (ISM)
Introduction
The ISM (designated ACSI 33) has been developed by the Defence Signals Directorate under their role to provide policies and standards for Australian Government agencies to assist in the protection of official government information that is processed, stored or communicated by Australian Government systems.
Authority
Australian Government agencies are required by the Australian Government Protective Security Manual (PSM) to comply with the ISM for the protection of official government information when it is processed, stored or communicated by Australian Government systems. Although requirements will be more stringent when national security or non-national security information and systems are involved, even UNCLASSIFIED information and systems should have some degree of protection if a reliable or accurate service is to be maintained.
Versions
The ISM is available in two UNCLASSIFIED versions. One version has been authorised for release into the public domain and covers information and systems classified up to RESTRICTED and PROTECTED whilst another UNCLASSIFIED version covers all classifications of information and systems but has not been authorised for release into the public domain.
Downloads
The table below contains links to the UNCLASSIFIED versions that have
been authorised for release into the public domain between 2007 and
2008 along with companion documents that identifies the changes introduced
since the previous release. Requests for earlier releases can be made
by contacting DSD.
| Date | ISM Release | Errata |
|---|---|---|
| December 2008 | [PDF 1.95MB] | |
| September 2008 | [PDF 1.32MB] | [PDF 227KB] |
| September 2007 | [PDF 1.54MB] [PDF 192KB] | [PDF 1.82MB] |
The UNCLASSIFIED version that has not been authorised for release into the public domain is available from the Members Area of the OnSecure website at www.onsecure.gov.au. Additional ISM resources, such as a changes document and compliance checklists, are also available from the OnSecure website.
Hardcopy distribution
Hardcopy versions are available to agencies upon request. If you wish to receive a hardcopy, please provide the information below via email to DSD (See Contact DSD for email address details).
- Name
- Agency
- Postal address
- Phone Number

