SC-40(4)

Requirement

Implement cryptographic mechanisms to prevent the identification of [Assignment: organization-defined wireless transmitters] by using the transmitter signal parameters.

Discussion

The implementation of cryptographic mechanisms to prevent the identification of wireless transmitters protects against the unique identification of wireless transmitters for the purposes of intelligence exploitation by ensuring that anti-fingerprinting alterations to signal parameters are not predictable by unauthorized individuals. It also provides anonymity when required. Radio fingerprinting techniques identify the unique signal parameters of transmitters to fingerprint such transmitters for purposes of tracking and mission or user identification.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; access control policy and procedures; procedures addressing system design documentation; wireless network diagrams; system configuration settings and associated documentation; system architecture; system communications hardware and software; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developer; organizational personnel installing, configuring, and/or maintaining the system; organizational personnel authorizing, installing, configuring, and/or maintaining internal and external wireless links].

Test

[SELECT FROM: Cryptographic mechanisms preventing the identification of wireless transmitters].

ID	Assessment Objectives
SC-40(04)	cryptographic mechanisms are implemented to prevent the identification of <SC-40(04)_ODP wireless transmitters> by using the transmitter signal parameters.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!