Zoning systems and TEMPEST analysis laboratories
The concept “NATO Zoning Procedures” defines an attenuation measurement procedure, according to which, individual rooms within a security perimeter can be classified into Zone 0, Zone 1, Zone 2, or Zone 3, which then determines what shielding test standard is required for equipment that processes secret data in these rooms.
The TEMPEST Analysis Laboratory provides complex measurements in the 100Hz to 18GHz frequency range, as well as conformity assessment metrics with current NATO TEMPEST standards defining three levels of protection requirements:
- NATO SDIP-27 Level A (formerly AMSG 720B) and USA NSTISSAM Level I
“Compromising Emanations Laboratory Test Standard” This is the strictest standard for devices that will be operated in NATO Zone 0 environments, where it is assumed that an attacker has almost immediate access (e.g. neighbouring room, 1 m distance).
- NATO SDIP-27 Level B (formerly AMSG 788A) and USA NSTISSAM Level II
“Laboratory Test Standard for Protected Facility Equipment” This is a slightly relaxed standard for devices that are operated in NATO Zone 1 environments, where it is assumed that an attacker cannot get closer than about 20 m (or where building materials ensure an attenuation equivalent to the free-space attenuation of this distance).
- NATO SDIP-27 Level C (formerly AMSG 784) and USA NSTISSAM Level III
“Laboratory Test Standard for Tactical Mobile Equipment/Systems” An even more relaxed standard for devices operated in NATO Zone 2 environments, where attackers have to deal with the equivalent of 100 m of free-space attenuation (or equivalent attenuation through building materials).