New Zealand Information Security Manual (NZISM)
What is New Zealand Information Security Manual (NZISM)?
The New Zealand Information Security Manual (NZISM) provides information security guidance for New Zealand Government agencies. Maintained by the Government Communications Security Bureau (GCSB) via the National Cyber Security Centre (NCSC). It comprises 1425 controls organised across 23 domains, and applies in New Zealand (GCSB/NCSC).
How New Zealand Information Security Manual (NZISM) maps to other frameworks
All 1425 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 23 domains New Zealand Information Security Manual (NZISM) groups its controls into
Frameworks that share controls with New Zealand Information Security Manual (NZISM)
Each of these has at least one control mapped to a control in New Zealand Information Security Manual (NZISM). The number is how many New Zealand Information Security Manual (NZISM) controls are shared, counted from the mapping graph.
US Gramm-Leach-Bliley Act (GLBA) - Higher Education Safeguards Rule
4 shared controlsOWASP DevSecOps Maturity Model (DSOMM)
4 shared controlsNIST SP 800-146
4 shared controlsNIST SP 800-145
4 shared controlsNIST SP 800-144
4 shared controlsISO 27018
4 shared controlsISO 27017
4 shared controlsNIST SP 800-190
4 shared controlsTraining on frameworks that overlap New Zealand Information Security Manual (NZISM)
There is no course on New Zealand Information Security Manual (NZISM) itself. These cover frameworks that share controls with it, so the material carries across even though the standard named is different.
Where New Zealand Information Security Manual (NZISM) overlaps with the standards you already hold
What an auditor will ask you for
All 8 New Zealand Information Security Manual (NZISM) controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.
Read the New Zealand Information Security Manual (NZISM) evidence request listWhat New Zealand Information Security Manual (NZISM) means in your sector
What New Zealand Information Security Manual (NZISM) means for your job
Questions people ask about New Zealand Information Security Manual (NZISM)
What is New Zealand Information Security Manual?
How many controls does New Zealand Information Security Manual have?
Where does New Zealand Information Security Manual apply?
What frameworks does New Zealand Information Security Manual map to?
How do I get started with New Zealand Information Security Manual compliance?
Query New Zealand Information Security Manual (NZISM) programmatically
New Zealand Information Security Manual (NZISM), its 1425 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
New Zealand Information Security Manual (NZISM) API reference and MCP config →What New Zealand Information Security Manual (NZISM) requires, control by control
Each page carries the requirement text for one New Zealand Information Security Manual (NZISM) control and what an assessor expects to see as evidence.
How ready are you for New Zealand Information Security Manual (NZISM)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.