ASD ISM 1884Ensure Compliance with Emanation Security Doctrine
Official control statement
Emanation security doctrine produced by ASD for the management of emanation security matters is complied with.
Quoted as published. Everything else on this page is written by Control Stack.
In plain English
Organisations must follow guidelines for managing information leaks through electromagnetic emissions.
What this means in practice
This control is all about preventing leaks of sensitive information through electromagnetic waves, like those that come from electronic devices. If we ignore this, hackers could intercept these signals and access private data, risking the security of our entire organisation.
Framework
ASD Information Security Manual (ISM)
Control effect (Control Stack)
Preventative
Classifications
OS, P, S, TS
ISM last updated
Dec 2023
Control Stack last updated
29 Sept 2026
E8 maturity levels
N/A
Section
Emanation securityTopic
Emanation security doctrine
Why it matters
Without emanation security controls, electromagnetic emissions may be exploited to recover sensitive information, enabling espionage and serious data compromise.
Operational notes
Apply ASD emanation security doctrine: assess areas handling classified data, enforce zoning/separation, use ASD-approved countermeasures, and periodically verify emissions meet doctrine requirements.
Implementation tips
- The IT manager should ensure all staff are aware of the potential risk of electromagnetic leaks by organising regular training sessions. In these sessions, explain how electronic devices can unintentionally emit signals and what can be done to minimise these emissions.
- IT staff should conduct regular scans of the organisation's offices to check for any abnormal electromagnetic emissions. Use specialised equipment to detect any unusual signals that might leak sensitive data.
- Facilities managers should check that all new office devices meet recommended standards to prevent electromagnetic leaks. They can achieve this by following guidelines from Australian Signals Directorate (ASD) during purchase and installation processes.
- Management should ensure that sensitive work areas have additional protections. This might include creating designated zones where only pre-approved, low-emission equipment is used and installed, reducing the chance of leaks.
- The security team should routinely update policies on device use and storage, incorporating ASD's emanation security guidelines. Make sure all staff are informed of these policies and understand their role in ensuring compliance.
Audit / evidence tips
- AskThe training records related to electromagnetic emissionsLook atDates, attendance lists, and summaries of what was coveredGoodRecord will show regular, comprehensive training sessions at least annually
- Look atThe details of findings, equipment used, and frequency of the scans. The best outcome is clear documentation of periodic checks and resolved issues
- AskPurchasing records of electronic devices. Check the documentation for compliance with ASD's guidelines on electromagnetic emissions. Proper records will indicate that all devices meet emanation security standards
- AskPolicy documents relating to device use and storageLook atHow policies align with ASD's guidelines and evidence staff have acknowledged themGoodWill be current policies circulated within the last 12 months with evidence of staff agreement
Cross-framework mappings
How ISM-1884 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
sync_altPartially overlaps(2)expand_less | ||
| Annex A 7.8 | ISM-1884 requires compliance with ASD emanation security doctrine for the management of emanation security matters | |
| Annex A 7.12 | ISM-1884 requires compliance with ASD emanation security doctrine for the management of emanation security matters | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.
Related ASD ISM controls in Communications infrastructure
See all Guidelines for communications infrastructure controls, or browse the full ASD ISM library.