← PE — Physical and Environmental Protection

PE-19 Information Leakage

Not in a baseline

Protect the system from information leakage due to electromagnetic signals emanations.

Discussion

Information leakage is the intentional or unintentional release of data or information to an untrusted environment from electromagnetic signals emanations. The security categories or classifications of systems (with respect to confidentiality), organizational security policies, and risk tolerance guide the selection of controls employed to protect systems against information leakage due to electromagnetic signals emanations.

Enhancements

ISO/IEC 27001:2022 Crosswalk

A.7.5*A.7.8*A.8.12

* does not fully satisfy the intent of this control (per NIST's mapping notes).