Government Communications Security Bureau

The New Zealand Information Security Manual (NZISM)

The New Zealand Information Security Manual (NZISM) provides up-to-date technical policy to assist government departments and agencies in securing information systems and the data stored in those systems

It recognises the changing technologies and threat environment in which government departments and agencies operate and should be considered as a best practice guide, even where an agency may not access or process classified information. In cases where official or classified information is processed, this guidance should be considered as the baseline information security standard.

You may download a copy of the NZISM here. [PDF 1.32MB]
No printed or CD copies are provided.

The publication of the NZISM supersedes the New Zealand Security of Information Technology (NZSIT) 400, 401 and 402 technical policy and guidance last published in 2008. These NZSIT documents should therefore be withdrawn from use.

We welcome commentary on completeness, ease of use and identification of any error or ambiguity in the NZISM. To assist us in improving subsequent versions of the NZISM any commentary or queries should be submitted to


Click on a question in the menu below to see answers and examples.

» Classification
» Cryptography
» Responsibilities
» Document Ownership
» Risk

You may download the Comments and Error Notification Form here.

Copyright ©. This copyright work is licensed under the Creative Commons Attribution 3.0 New Zealand licence. In essence, you are free to copy, distribute and adapt the work, as long as you attribute the work to the Crown and abide by the other licence terms. To view a copy of this licence, visit Please note that no departmental or governmental emblem, logo or Coat of Arms may be used in any way which infringes any provision of the Flags, Emblems, and Names Protection Act 1981 or would infringe such provision if the relevant use occurred within New Zealand. Attribution to the Crown should be in written form and not by reproduction of any such emblem, logo or Coat of Arms.