A shielding effectiveness measurement evaluates a defined enclosure under defined electromagnetic test conditions. An emissions-security evaluation addresses a broader set of questions. Treating the two as equivalent can lead to a scope that produces the wrong evidence for the authority’s review.
Separate the responsibilities
| Responsibility | Purpose |
|---|---|
| Project security authority | Approve applicable protection requirements, interpretation and acceptance |
| CTTA | Provide the applicable TEMPEST technical authority direction within the relevant program |
| Shielding designer and trades | Implement the approved enclosure and interfaces |
| Independent test team | Document the agreed measurements, conditions and limitations |
Use the approved requirement
The NCSC public IC Technical Specifications, version 1.5.1 provides public context for SCIF planning. It does not justify assigning one RF attenuation requirement to every facility. Confirm project-specific direction and arrange protected communication when the underlying requirements or site information cannot be discussed publicly.
Define the deliverable carefully
A field report should identify the shielding measurement scope and avoid a title or conclusion implying that routine measurements constitute TEMPEST certification or SCIF accreditation. OSAT supplies technical evidence within its agreed scope. Final security acceptance and accreditation remain with the responsible authorities.
- Identify who approves the RF performance schedule.
- Confirm whether shielding measurements, emissions-security work or both are being procured.
- List the evidence each reviewer needs before scheduling.
- Arrange approved handling for protected criteria and records.
- Keep the acoustic scope distinct from RF and information-system security work.
For an initial scope discussion, request testing using unclassified information only. OSAT documents measured performance; the responsible authority makes acceptance and accreditation decisions.