ASD ISM 1013 Limit wireless range with RF shielding
What it says
The effective range of wireless communications outside an organisation's area of control is limited by implementing RF shielding on facilities in which SECRET or TOP SECRET wireless networks are used.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishRF shielding is used to control the wireless signal range and keep it limited to an organisation's secure area.
This control is about using something called RF shielding to prevent wireless network signals from leaking outside your organisation's secure area. It's important because if wireless signals travel beyond your walls, unauthorised people outside could potentially intercept sensitive information, which could lead to data breaches and loss of privacy.
Free. Save your status, tasks and notes.
Why it matters
Without RF shielding, SECRET/TOP SECRET wireless signals may extend beyond the controlled area, enabling interception and compromising sensitive information.
How to implement
Facilities Manager should ensure that RF shielding is installed in areas using high-security wireless networks.
They can do this by working with an RF shielding contractor to assess the current setup and install appropriate materials like special paints, films, or mesh that block wireless signals.
IT Team should regularly check the strength and reach of your organisation's wireless signals.
They can perform wireless signal mapping to identify if there are any leaks beyond what's desired and adjust the shielding or network configurations accordingly.
Security Officer should draft and maintain a wireless network range policy.
This policy should outline the acceptable range for wireless networks within the building and steps to mitigate any detected breaches.
Network Administrator should configure the wireless access points to limit their broadcast strength wherever possible.
This could include adjusting the power settings on routers to reduce the signal range, complementing the physical RF shielding.
Procurement Team should source materials and services needed to implement RF shielding.
They need to work with vendors who specialise in RF technologies to ensure all products meet the necessary security specifications.
Keep it running
Regularly test RF shield coverage (site surveys) and inspect seams, doors and penetrations so SECRET/TOP SECRET wireless signals remain within the controlled perimeter.
Evidence and audit
- Check 1 of 3What an auditor asks for
Ask for
The RF shielding assessment report: Request the latest report provided by the RF shielding contractor.
Look at
The detailed measurements of signal strength inside and outside the facility. Good results show no signal leakage beyond the controlled perimeter.
- Check 2 of 3What an auditor asks for
Ask for
A copy of the wireless network range policy: Ensure it describes the acceptable range and required shielding measures. The best policy will have clear, actionable steps and a review date indicating regular checks.
- Check 3 of 3What an auditor asks for
Ask for
Documentation on training or awareness activities around wireless security: Check if staff received guidance on maintaining secured wireless environments. Good records include participant lists, training content, and feedback.
Mappings
Closest match in ISO/IEC 27001: A.7.6, Security measures for working in secure areas, which this control partially meets.
ISO/IEC 27001: 1 mapping
This control partially meets A.7.6.
ISM-1013 requires RF shielding to limit the effective range of SECRET or TOP SECRET wireless networks outside the organisation's area of control. Annex A 7.6 requires security measures for working in secure areas, which can include physical and emanations-security protections such as shielding where needed. ISM-1013 is a specific technical/physical countermeasure, whereas Annex A 7.6 is broader and covers a range of secure-area controls beyond wireless containment.
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.