Title

Physical access to commercial Add/Drop Multiplexers (ADMs) is not restricted. (Cat III impact)

Discussion

Requirement: The IAO or other responsible party will ensure that the physical access to commercial Add/Drop Multiplexers (ADMs) is limited. Transport equipment to include ADMs may be located in isolated areas with no personnel assigned to work in these facilities on a regular basis. The site must protect these systems from unauthorized access in order to protect the integrity and reliability of the DSN.

Check Content

Perform a walk through of the facility to confirm that all DSN core and transmission devices that are part of the system are located in a secure room or locked cabinet.

Fix Text

> Take measures to apply or install or upgrade physical security for system core assets (Switches, Servers,) and transmission devices (network switches, routers, muxes, devices). Limit, control, and document the distribution of keys to access the equipment.

Additional Identifiers

Rule ID: SV-8440r1_rule

Vulnerability ID: V-7954

Group Title: Physical access to commercial ADM not restricted

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.