NIST Special Publication 800-53 (Rev. 4)

Security and Privacy Controls for Federal Information Systems and Organizations

PE-19 INFORMATION LEAKAGE

Family:
Physical and Environmental Protection
Class:
Priority:
P0 - Unspecified priority.
Baseline Allocation:
Low Moderate High

Control Description

The organization protects the information system from information leakage due to electromagnetic signals emanations.

Supplemental Guidance

Information leakage is the intentional or unintentional release of information to an untrusted environment from electromagnetic signals emanations. Security categories or classifications of information systems (with respect to confidentiality) and organizational security policies guide the selection of security controls employed to protect systems against information leakage due to electromagnetic signals emanations.

Control Enhancements

PE-19 (1) INFORMATION LEAKAGE | NATIONAL EMISSIONS / TEMPEST POLICIES AND PROCEDURES
The organization ensures that information system components, associated data communications, and networks are protected in accordance with national emissions and TEMPEST policies and procedures based on the security category or classification of the information.

References

FIPS Publication 199 http://csrc.nist.gov/publications/PubsFIPS.html#199