An ISDN-based VTC system supporting secure (classified) and non-secure (unclassified) conferences must be cabled to maintain a minimum of 5 or 15 centimeters RED/BLACK separation on either side of the Type 1 encryptor and the dial isolator (depending on the TEMPEST zone).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-43045	RTS-VTC 7400	SV-55774r1_rule	ECTC-1	Low

Description
Information leakage is the intentional or unintentional release of information to an untrusted environment from electromagnetic signals emanations. Security categories or classifications of information systems (with respect to confidentiality) and organizational security policies guide the selection of security controls employed to protect systems against information leakage due to electromagnetic signals emanations. The appropriate and required separations between RED and BLACK equipment and cables must be met. This includes cable routing inside equipment cabinets. Depending on TEMPEST ZONE, the separation requirements are: • Minimum equipment separation - 50 cm or 1m. • Minimum cable separation - 5 cm or 15 cm. The un-encrypted information, wiring, and processing equipment are considered RED while the encrypted information, wiring, and processing equipment are considered BLACK.

Description

Information leakage is the intentional or unintentional release of information to an untrusted environment from electromagnetic signals emanations. Security categories or classifications of information systems (with respect to confidentiality) and organizational security policies guide the selection of security controls employed to protect systems against information leakage due to electromagnetic signals emanations. The appropriate and required separations between RED and BLACK equipment and cables must be met. This includes cable routing inside equipment cabinets. Depending on TEMPEST ZONE, the separation requirements are: • Minimum equipment separation - 50 cm or 1m. • Minimum cable separation - 5 cm or 15 cm. The un-encrypted information, wiring, and processing equipment are considered RED while the encrypted information, wiring, and processing equipment are considered BLACK.

STIG	Date
Video Services Policy STIG	2014-06-26

Details

Check Text ( C-49192r4_chk )
Based on the TEMPEST ZONE, verify whether the required separations between RED and BLACK equipment and cables have been met. This includes cable routing inside equipment cabinets. Depending on the TEMPEST ZONE, the separation requirements are: • Minimum equipment separation - 50 cm or 1m • Minimum cable separation - 5 cm or 15 cm If the cables or equipment are closer than the minimum cable and equipment separation distances, this is a finding.

Check Text ( C-49192r4_chk )

Based on the TEMPEST ZONE, verify whether the required separations between RED and BLACK equipment and cables have been met. This includes cable routing inside equipment cabinets. Depending on the TEMPEST ZONE, the separation requirements are:
• Minimum equipment separation - 50 cm or 1m
• Minimum cable separation - 5 cm or 15 cm
If the cables or equipment are closer than the minimum cable and equipment separation distances, this is a finding.

Fix Text (F-48625r2_fix)
Install cabling and equipment in accordance with NSTISSAM TEMPEST-2-95. Depending on the TEMPEST ZONE, the separation requirements are: • Minimum equipment separation - 50 cm or 1m • Minimum cable separation - 5 cm or 15 cm