The National Technical Authority for Information Assurance
 
  ABOUT US   PRODUCTS & SERVICES   PUBLICATIONS   POLICY & TECHNOLOGIES   FIND A .....
Introduction
   
  CESG Assisted Products Service (CAPS)
 
  CESG Listed Adviser Scheme (CLAS)
 
  CESG Tailored Assurance Service (CTAS)
 
  CESG Claims Tested Mark (CCTM)
 
  CHECK
 
  Cryptographic Evaluations
 
  Common Criteria & ITSEC
 
  HMG IA Maturity Model
 
  IT Health Check
 
  Open Standards Validations
 
  TEMPEST
 
  Contact the IACS team
 
  Business Questionnaire for Common Criteria and Tailored Assurance Services (doc)

 
 
TEMPEST

All electrical and electronic equipment produces unintentional radiation, which could be intercepted by a receiving device some distance away from the equipment. TEMPEST is defined as the study of the emission of unintentional protectively marked data (usually Confidential and above) from an equipment or system. If these emissions were intercepted and analysed they could reveal compromising emanations and thus the protectively marked data.

TEMPEST Control
It is not possible to eliminate this potential weakness of an equipment or system, but the UK national standards for TEMPEST testing and control provide a very high standard of integrity for protectively marked data. The standards which the UK require for the suppression of TEMPEST signals carry a protective marking and are in the SDIPS (SECAN Doctrine and Information Publications). Information can also be obtained from CESG Memorandum Number 32 (UK Requirements for TEMPEST Countermeasures).

TEMPEST Certification
TEMPEST Certification in the UK is carried out by CESG accredited test facilities. The test results from these facilities are endorsed by CESG against the SDIP TEMPEST standards.

The developer of the product or system funds the TEMPEST evaluation and certification of the product or system.
Once endorsed by CESG and a certificate issued to the relevant standard the product can be entered on the (NRPL) NATO Recommended Products List. The developer is then mandated to maintain the configuration control of the certified product and undertake production assurance testing during the production life of the product.

Further information can be obtained from CESG 01242 221491 ext. 35412.
 © Crown copyright, 2008. This CESG Website is maintained for your personal use and viewing. Access and use by you of this site constitutes acceptance of our terms and conditions which take effect from the date of first use. Click here for our terms and conditions CESGweb@cesg.gsi.gov.uk