PE-19: Information Leakage

CSF v1.1 References:

PF v1.0 References:

Threats Addressed:


  • Low


  • Moderate


  • High


Next Version:

Control Statement

The organization protects the information system from information leakage due to electromagnetic signals emanations.

Supplemental Guidance

Information leakage is the intentional or unintentional release of information to an untrusted environment from electromagnetic signals emanations. Security categories or classifications of information systems (with respect to confidentiality) and organizational security policies guide the selection of security controls employed to protect systems against information leakage due to electromagnetic signals emanations.

Control Enhancements

PE-19(1): National Emissions / Tempest Policies And Procedures


(Not part of any baseline)

The organization ensures that information system components, associated data communications, and networks are protected in accordance with national emissions and TEMPEST policies and procedures based on the security category or classification of the information.