September 2024 New Zealand Information Security Manual v3.8 Release

  • Posted September 05, 2024

The New Zealand Information Security Manual (NZISM) has released an update (v3.8), which includes updates to Chapters 11 and 15. 

Chapter 11 has separated Bluetooth communication and radio frequency and infrared devices into different sections. This work stemmed from IT security managers being asked to incorporate a wide range of devices and peripherals into their protection boundary. This work covers enterprise devices, not medical devices.  

Chapter 15 has been updated to improve email security. This change supports the Government Chief Digital Officer's (GCDO) work to develop an architecture and common framework for email security based on open standards.

What's next? We are starting work to update access controls and passwords (chapter 16), system certification and accreditation (chapter 4), roles and responsibilities (chapter 3).

If you would like to participate in the development of this work, please reach out to the team:  nzism@gcsb.govt.nz