Applicable

(Y)es / (N)o

(C)onfidentiality

(I)ntegrity

(A)vailability

RPN

(C+I+A)

(S)atisfactory

L1

M2

H3

L1

M2

H3

L1

M2

H3

(O)ther than satisfactory +##

pe-19(1)

information leakage  | national emissions / tempest policies and procedures

assessment objective:

Determine if the organization ensures that the following are protected in accordance with national emissions and TEMPEST policies and procedures based on the security category or classification of the information:  

pe-19(1)[1]  

information system components;

pe-19(1)[2]  

associated data communications; and

pe-19(1)[3]  

networks.

potential assessment methods and objects:

Examine: [select from: Physical and environmental protection policy; procedures addressing information leakage that comply with national emissions and TEMPEST policies and procedures; information system component design documentation; information system configuration settings and associated documentation other relevant documents or records].

Interview: [select from: Organizational personnel with responsibilities for information system environmental controls; organizational personnel with information security responsibilities].

Test: [select from: Information system components for compliance with national emissions and TEMPEST policies and procedures].