PE-21 Electromagnetic Pulse Protection

Guidance: nonePolicy clause: noneWhat these mean

Baselines	Implementation level	Enhancements
Not in a baseline	Organization	None

Related controls: PE-18, PE-19

Control statement

Employ [Assignment: organization-defined protective measures] against electromagnetic pulse damage for [Assignment: organization-defined system and system components].

NIST discussion

An electromagnetic pulse (EMP) is a short burst of electromagnetic energy that is spread over a range of frequencies. Such energy bursts may be natural or man-made. EMP interference may be disruptive or damaging to electronic equipment. Protective measures used to mitigate EMP risk include shielding, surge suppressors, ferro-resonant transformers, and earth grounding. EMP protection may be especially significant for systems and applications that are part of the U.S. critical infrastructure.

Assessment objectives (SP 800-53A)

Objectives and methods for PE-21

Determine if [Assignment: organization-defined protective measures] are employed against electromagnetic pulse damage for [Assignment: organization-defined system and system components].

Examine: Physical and environmental protection policy; procedures addressing protective measures to mitigate EMP risk to systems and components; documentation detailing protective measures to mitigate EMP risk; list of locations where protective measures to mitigate EMP risk are implemented; system security plan; other relevant documents or records.

Interview: Organizational personnel with responsibilities for physical and environmental protection; system developers/integrators; organizational personnel with information security responsibilities.

Test: Mechanisms for mitigating EMP risk.