STIGQter STIGQter: STIG Summary: Traditional Security Checklist Version: 1 Release: 3 Benchmark Date: 15 Jun 2020:

Protected Distribution System (PDS) Construction - Hardened Carrier

DISA Rule

SV-40984r4_rule

Vulnerability Number

V-30942

Group Title

PDS Construction - Hardened Carrier

Rule Version

CS-04.01.02

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

1. Data cables must be installed in a carrier configured as a "Hardened Carrier" IAW CNSSI 7003. The carrier must be constructed of ferrous, electrical metallic tubing (EMT); ferrous pipe conduit; or ferrous rigid sheet metal ducting. Flexible conduit and armored cables must not be used as a hardened carrier. The carrier must not open to expose data cables (e.g., removable covers), except at approved pull boxes and termination boxes. The carrier must utilize elbows, couplings, nipples, and connectors of the same materials. All joints and connections must be sealed.

NOTE: A vendor product (AKA: Modular PDS) may be used if constructed of solid metal components and sealed - as described above.

2. The PDS must not be located within an Uncontrolled Access Area (UAA).

Check Contents

1. A Hardened Carrier IAW CNSSI 7003 must be constructed of ferrous, electrical metallic tubing (EMT); ferrous pipe conduit; or ferrous rigid sheet metal ducting. Flexible conduit and armored cables must not be used as a hardened carrier. The carrier must not open to expose data cables (e.g., removable covers), except at approved pull boxes and termination boxes. The carrier must utilize elbows, couplings, nipples, and connectors of the same materials. All joints and connections must be sealed.

NOTE: A vendor product (AKA: Modular PDS) may be used if constructed of solid metal components and sealed - as described above.

2. The PDS is not within an Uncontrolled Access Area (UAA).

Vulnerability Number

V-30942

Documentable

False

Rule Version

CS-04.01.02

Severity Override Guidance

1. A Hardened Carrier IAW CNSSI 7003 must be constructed of ferrous, electrical metallic tubing (EMT); ferrous pipe conduit; or ferrous rigid sheet metal ducting. Flexible conduit and armored cables must not be used as a hardened carrier. The carrier must not open to expose data cables (e.g., removable covers), except at approved pull boxes and termination boxes. The carrier must utilize elbows, couplings, nipples, and connectors of the same materials. All joints and connections must be sealed.

NOTE: A vendor product (AKA: Modular PDS) may be used if constructed of solid metal components and sealed - as described above.

2. The PDS is not within an Uncontrolled Access Area (UAA).

Check Content Reference

M

Potential Impact

There are five types of Category 2 PDS: 1. Hardened Carrier (STIG ID: CS-04.01.02) 2. Alarmed Carrier (STIG ID: CS-04.01.08) 3. Continuously Viewed Carrier. (STIG ID: CS-04.01.06) 4. Buried Carrier (STIG ID: CS-04.01.04) and 5. Suspended Carrier (STIG ID: CS-04.01.05)

This Rule covering Hardened Carriers (STIG ID CS-04.01.02) may be used in conjunction with the other Category 2 carriers. Different requirements apply to each type of Category 2 carrier and must be assessed under their respective STIG Rules.

Target Key

2506

Comments