CCI-004267

Defines the protective measure employed against electromagnetic pulse damage for organization-defined systems and system components.

Implementation Guidance

Determine if [PE-21_ODP[01]; protective measures to be employed against electromagnetic pulse damage are defined] are employed against electromagnetic pulse damage for [PE-21_ODP[02]; system and system components requiring protection against electromagnetic pulse damage are defined].

Validation Procedures

Examine: [SELECT FROM: Physical and environmental protection policy; procedures addressing protective measures to mitigate EMP risk to systems and components; documentation detailing protective measures to mitigate EMP risk; list of locations where protective measures to mitigate EMP risk are implemented; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with responsibilities for physical and environmental protection; system developers/integrators; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Mechanisms for mitigating EMP risk].

The controls below (if any) were marked by NIST as being related to CCI-004267.