What is recommended if TEMPEST countermeasures are deemed necessary after a review?

• A. A complex system of safeguards must be implemented
• B. The most cost-effective countermeasure must be recommended
• C. Only the highest technology must be used
• D. No recommendations are made

Answer: (B)

In the context of TEMPEST countermeasures, which are designed to protect against the unintentional emanations of sensitive unencrypted data, the most prudent approach is to recommend the most cost-effective countermeasure. This is due to the need for balancing security requirements with the associated costs, ensuring that the recommended solutions do not strain financial resources while still addressing the vulnerability effectively.

Opting for cost-effective measures allows organizations to implement necessary protections without overspending, thereby encouraging broader adoption of security practices. This approach was taken to prevent the overengineering or unnecessary complexity that might arise from only using high-tech solutions, which can lead to elevated costs without a corresponding increase in security effectiveness.

By focusing on cost-effectiveness, organizations can ensure that the necessary safeguards are feasible and sustainable over time, enhancing overall security posture without compromising on essential functionality or putting undue financial burdens on the entity.