PE-19: Information Leakage

CSF v1.1 References:

CSF v2.0 References:

PF v1.0 References:

Threats Addressed:

Baselines:

  • Low

    N/A

  • Moderate

    N/A

  • High

    N/A

  • Privacy

    N/A

  • OT Low (SP 800-82r3)

    N/A

  • OT Moderate (SP 800-82r3)

    N/A

  • OT High (SP 800-82r3)

    N/A

Previous Version:

Control Statement

Protect the system from information leakage due to electromagnetic signals emanations.

Supplemental Guidance

Information leakage is the intentional or unintentional release of data or information to an untrusted environment from electromagnetic signals emanations. The security categories or classifications of systems (with respect to confidentiality), organizational security policies, and risk tolerance guide the selection of controls employed to protect systems against information leakage due to electromagnetic signals emanations.

Control Enhancements

PE-19(1): National Emissions Policies and Procedures

Baseline(s):

(Not part of any baseline)

Protect system components, associated data communications, and networks in accordance with national Emissions Security policies and procedures based on the security category or classification of the information.