Attachment J.2 Crash Data Acquisition Network Setup Requirements.docx

C D A N RE QU I RE ME N T S

Crash Data Acquisition Network

Crash Data Acquisition Network

Please note that the responsible party for selection and installation of a site(s) may be required to respond to each requirement as part of a Certification & Accreditation (C&A) process.

Field Site Setup Requirements

The Crash Data Acquisition Network support group is providing contractors field site setup information for new data collection sites to ensure compliance with requirements.

The Crash Data Acquisition Network wants to ensure that any contractor who is awarded a field site(s) within CDAN complies with the requirements listed below.

Physical Controls

1.1 Facility should have secured access points (doors, windows, ceilings).

1.2 Tenant should have control over keys, pin numbers, access cards to location.

1.3 There should be restricted shared access with other tenants/landlord.

1.4 Emergency lighting should be in place throughout the building.

1.5 Fire/smoke detection devices should be present throughout the building.

1.6 Environmental controls (temperature, humidity) should be controllable by tenant for the identified space.

1.7 Pipes should not be located directly over workspaces and or computer hardware such as servers or network equipment.

1.8 Deliveries should be made to a secure location within the space or the building. Packages cannot be left outside or in front of the office door in a publicly accessible space.

Access Controls

2.1 If available, identify any building monitoring devices (CCTV, guards, and sign in logs) and ensure that the space is included under that monitoring; identify facility intrusion alarms and procedures.

2.2 Building visitor logs must be maintained for up to one calendar year.

2.3 There must be a controlled entry to the space so that visitors can be properly identified.

Networking Controls: Wired

3.1 Internet Service Provider (ISP) must be able to provide business-class service to facility (75mbps download, 35mbps upload minimum; 150Mbs/65Mbps preferred; Or approved Telecommunications Exception Condition (TEC) form).

3.2 Digital Subscriber Line (DSL) not recommended (Requires approved TEC form)

3.3 Internet and telephone line locations must be secured and restricted access only.

3.4 Cabling within space should not be located within shared (other tenants adjacent) walls.

3.5 All network cables need to be a at least Category 6 or better.

3.6 Network cables should be subject to best- practices cable management and not exposed to any environmental hazards.

Networking Controls: Wireless

4.1 If used, local area wireless network must use a minimum of WPA2 (Personal) private key encryption. WPA2 Enterprise is highly recommended where available.

4.2 Wireless encryption keys must be changed at least once every 60 days.

4.3 WPS passcode service must be disabled on the wireless router and any connected devices (range extenders, etc).

4.4 SSID must not provide any identifying information such as office # or phrases identifying the nature of the work being performed (aka, “DOT OFFICE #12” or “CDAN”). We recommend that the SSID should be comprised of a random string of alpha numeric characters.

4.5 Wireless network must be set to the lowest power which covers the required service area. Setting the router to max power is NOT recommend and will very likely lead to signal bleed out to unauthorized areas.

Emergency Precautions

5.1 There should be a means to cut power to the systems in emergency situations.

5.2 Tenant must be able to use short-term uninterruptible power supplies (UPS).

image7.png image8.png image9.png image10.png image11.png image12.png image13.png image14.png image15.png image16.png image17.png image18.png image19.png image20.png image21.png image22.png image23.png image24.png image25.png image26.png image27.png image28.png image29.png image30.png image31.png image32.png image33.png image34.png image18.jpeg image1.png image2.png image3.png image4.png image5.png image6.png