Protected Distribution System (PDS) Construction

Protected Distribution System (PDS) Construction - Buried PDS Carrier

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-30969	CS-04.01.04	SV-41011r3_rule	DCSR-3 ECCT-2 PESS-1	High

Description
A PDS that is not constructed, configured and physically secured as required could result in the undetected interception of classified information.

STIG	Date
Traditional Security	2013-07-11

Details

Check Text ( C-39629r6_chk )
Exterior PDS: If the hardened carrier is buried: 1. Check to ensure it is a minimum of 1 meter below the surface and on the property owned or leased by the U.S. Government or the contractor having control of the PDS. (CAT II finding) 2. Check that Manholes are secured with a S&G 8077 changeable combination padlock. If the S&G 8077 cannot be used, then a standard locking manhole cover and approved micro-switch alarms will be used. As an alternative to the S&G 8077 padlock or approved micro-switch alarms, manhole covers may be completely welded around the opening surface to impede opening and provide for clear evidence of penetration. Spot welding is not acceptable. This alternative is only acceptable on exterior PDS located within CONUS. (CAT I finding) 3. If the carrier is buried in an installation outside the U.S. in a MEDIUM threat location, check to ensure it is encased in approximately 20 cm (8 inches) of concrete or a concrete and steel container (of sufficient size to preclude surreptitious penetration in a period less than two hours as confirmed by laboratory tests). (CAT II finding)

Check Text ( C-39629r6_chk )

Exterior PDS: If the hardened carrier is buried:

1. Check to ensure it is a minimum of 1 meter below the surface and on the property owned or leased by the U.S. Government or the contractor having control of the PDS. (CAT II finding)

2. Check that Manholes are secured with a S&G 8077 changeable combination padlock. If the S&G 8077 cannot be used, then a standard locking manhole cover and approved micro-switch alarms will be used. As an alternative to the S&G 8077 padlock or approved micro-switch alarms, manhole covers may be completely welded around the opening surface to impede opening and provide for clear evidence of penetration. Spot welding is not acceptable. This alternative is only acceptable on exterior PDS located within CONUS. (CAT I finding)

3. If the carrier is buried in an installation outside the U.S. in a MEDIUM threat location, check to ensure it is encased in approximately 20 cm (8 inches) of concrete or a concrete and steel container (of sufficient size to preclude surreptitious penetration in a period less than two hours as confirmed by laboratory tests). (CAT II finding)

Fix Text (F-34778r4_fix)
The following requirements must be applied to Exterior PDS: 1. If the hardened carrier is buried, it must be a minimum of 1 meter below the surface and on the property owned or leased by the U.S. Government or the contractor having control of the PDS. 2. The manholes must be secured with a S&G 8077 changeable combination padlock. If the S&G 8077 cannot be used, then a standard locking manhole cover and approved micro-switch alarms must be used. *As an alternative to either the S&G 8077 padlock or approved micro-switch alarms, manhole covers must be completely welded around the opening surface to impede opening and provide for clear evidence of penetration. Spot welding is not acceptable. This alternative is only acceptable on exterior PDS located within CONUS. 3. If the carrier is buried in an installation outside the U.S. in a MEDIUM threat location, it must be encased in approximately 20 cm (8 inches) of concrete or a concrete and steel container (of sufficient size to preclude surreptitious penetration in a period less than two hours as confirmed by laboratory tests).

Fix Text (F-34778r4_fix)

The following requirements must be applied to Exterior PDS:

1. If the hardened carrier is buried, it must be a minimum of 1 meter below the surface and on the property owned or leased by the U.S. Government or the contractor having control of the PDS.

2. The manholes must be secured with a S&G 8077 changeable combination padlock. If the S&G 8077 cannot be used, then a standard locking manhole cover and approved micro-switch alarms must be used.
*As an alternative to either the S&G 8077 padlock or approved micro-switch alarms, manhole covers must be completely welded around the opening surface to impede opening and provide for clear evidence of penetration. Spot welding is not acceptable. This alternative is only acceptable on exterior PDS located within CONUS.

3. If the carrier is buried in an installation outside the U.S. in a MEDIUM threat location, it must be encased in approximately 20 cm (8 inches) of concrete or a concrete and steel container (of sufficient size to preclude surreptitious penetration in a period less than two hours as confirmed by laboratory tests).