Att_(03)_TEMPEST_Control_Plan_Description.doc

24 August 2015 Attachment 03 TEMPEST Control Plan N00019-16-R-3001

N00019-15-P1-PMA-299-0097

Introduction

The TEMPEST Control Plan (TCP) documents the proposed design techniques that are used to minimize the potential TEMPEST vulnerabilities in the development of equipment or a system. The TCP also provides information that is used for the development of a TEMPEST Test Plan. This TCP Description provides the TCP content and preparation instructions.

Applicability

This TCP Description is applicable to equipments and systems that have a TEMPEST countermeasures requirement to meet one or more of the following documents:

· CNSSAM TEMPEST/1-13, RED/BLACK Installation Guidance;

· NSTISSAM TEMPEST/01-02, NONSTOP Evaluation Techniques;

· NSTISSAM TEMPEST/1-92, Compromising Emanations Lab Test Requirements, Electromagnetics;

· CNSSAM TEMPEST/Draft, TEMPEST Evaluation Standard (This document will supersede CNSSAM TEMPEST/01-02 and NSTISSAM TEMPEST/1-92 when published and is included for future use.)

Preparation

The TCP should be prepared by personnel that are familiar with TEMPEST design techniques. The TCP shall be reviewed and signed by a Certified TEMPEST Professional (CTP) Level II before submission to the sponsor. A CTP Level II is a TEMPEST professional certified by the National Security Agency (NSA) under Industrial TEMPEST Program to have the experience and knowledge required to prepare TEMPEST Plans.

Format

The TCP format shall provide the required information in clear and concise manner. Drawings and diagrams shall be provided with sufficient resolution so that all text is legible. Electronic copies of drawings and diagrams should be provided in PDF format, either embedded into the TCP document file or as a separate file(s).

Classification

Any meaningful TEMPEST information is classified. Except when the only TEMPEST countermeasure requirement is RED/BLACK Installation Guidance, the TCP shall be classified and marked accordingly. The classification should be derived by the applicable requirements documents and any other classification authority for the information contained in the TCP.

Content

The TCP shall provide the following information arranged in the following order:

Title Page.

The title page shall include:

· Name of the equipment or system.

· Name of the organization or firm preparing the TEMPEST Control Plan.

· Name of the contracting agency or sponsoring organization.

· Contract number if applicable.

Introduction

This section shall provide an introductory statement that provides the purpose and scope. Include a brief description of the equipment or system, nomenclature, acquisition, production variant(s) and fielding.

Reference Documents.

This section shall list the applicable TEMPEST requirements documents. For requirements documents that have more than one limit or requirement level, the specified limit or requirement level shall be listed. In some cases a Certified TEMPEST Technical Authority (CTTA) provides the limit or requirement level to the sponsoring organization.

If the equipment or system contains National Security Agency (NSA) certified encryption, then the TEMPEST requirements from the NSA Information Assurance System Requirements Document (IASRD) shall also be provided.

List the verification requirements and the organization responsible for the verification.

Management Control.

This section shall include specific responsibilities, lines of authority, and control. Provide the qualifications of the technical personnel who prepared the TCP and an implementation plan with milestones. The implementation plan shall provide, as a minimum, the following:

· Originator and sponsor TCP review authorities; and

· Milestones for TCP review, Critical Design Review (CDR), prototype and/or engineering unit development, production unit development; and

· If a verification test is required, then milestones for the TEMPEST test plan review, Test Readiness Review (TRR) and TEMPEST test; and

· If a verification test is the responsibility of the originator, the selected or planned Certified TEMPEST Laboratory that will perform the test.

System Description.

This section shall provide a functional description of the equipment or system and provide a theory of operation. The classification(s) of the data and the operational modes shall be described. If the equipment of system contains NSA certified encryption, then the certification boundary and NSA certification requirements shall be provided.

Mechanical Design.

This section shall include the following:

(1) Construction Techniques:

· Housing material; and

· RED/BLACK compartmentation; and

· Penetrations, such as windows, air vents, access plates; and

· Drawings, including an exploded view; and

· RF gasketing.

(2) Interface Techniques:

· Signal filtering; and

· Power filtering; and

· Location and mounting of filters; and

· Connectors/Junction Boxes.

(3) Other mechanical design features which may have an impact on the TEMPEST characteristics of the unit.

RED/BLACK Design

This section shall include the following:

(1) RED/BLACK signals:

· List of RED Signals; and

· RED/BLACK signal flow description and signal flow block diagram; and

· RED/BLACK power distribution description and power flow block diagram; and

· RED/BLACK signaling, such as type, amplitude, and transition times; and

· RED/BLACK interface signal amplitude, transition times, and design considerations; and

· For classified TCPs, list the RED Signals of Interest.

(2) Other RED/BLACK Design Features:

· Type of cables; and

· Grounds; and

· Clocks.

Transmitter Characteristics

If the equipment of system contains a transmitter, then this section shall provide the following:

· Antenna bandwidth

· RF output bandwidth

· IF bandwidth

· Baseband bandwidth

· Modulation type

· Signaling rate

· RF frequency band

· RF carrier power

· Sideband power

Summary and Conclusions

This section shall include a brief summary of the design techniques used to minimize TEMPEST vulnerabilities. Any design concerns or potential inability to meet the TEMPEST requirements shall be discussed. Rationale for why design shortcomings will not result in a TEMPEST vulnerability shall be provided.