cn801-000100-00.docx
DOCX document 28 KB Posted
- Attached to
- Construction, University Drive Bike Lanes
- Solicitation number
- IFB-114424
- Issued by
- Fairfax County, Virginia
About this file
This is a technical specification guideline document issued by the Commonwealth of Virginia Department for traffic signal and Intelligent Transportation System (ITS) equipment approval on state and local projects. The guideline applies to all projects containing traffic signals or ITS pay items referenced in Sections 703, 801, 802, 803, 804, 805, 806, 807, 809, 810, and 811 of the Specifications, and explicitly states it should not be used with the 2026 Spec Book. All network-capable devices must match approved hardware, firmware, and software versions listed on the Department's Operation Technology Critical Infrastructure list prior to installation. Previously approved devices or software that have been removed from the current list are prohibited from use. Contractors are required to submit devices, firmware, and software for review using the Department's Form C-25 and must obtain prior approval before installing any network-capable devices, including traffic signal equipment and ITS devices, that are not on the approved list.
The Department's Office of Information Security (OIS) and Operations Technology Division (OTD) will inspect and test all proposed network devices for compliance with Commonwealth of Virginia Information Security Standards and cybersecurity vulnerabilities. Contractors are responsible for coordinating with equipment and software suppliers to complete security checklists and provide device samples to the Department for vetting of non-approved items. The review timeline requires eight months for devices with cloud components or artificial intelligence functionality, and 90 days for devices without these features, measured from submission of the initial Operations Technology Field Device Security Assessment form. The Operations Technology Critical Infrastructure list and the Operations Technology Field Device Security Assessment form are available on the Department's website.
View the file
Other files
Show all 49
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Guidelines: Use on all projects containing Traffic Signals or ITS pay items. DO NOT USE WITH 2026 SPEC BOOK.
cn801-000100-00 TRAFFIC SIGNAL AND INTELLIGENT TRANSPORTATION SYSTEM EQUIPMENT APPROVAL—All network capable devices included in Sections 703, 801, 802, 803, 804, 805, 806, 807, 809, 810, and 811 of the Specifications shall match the approved hardware, firmware, and software versions on the Department’s Operation Technology Critical Infrastructure list in order to be installed. Previously approved devices, firmware, or software, including any revisions, which have been removed from the current list shall not be installed. Devices, firmware, and software shall be submitted for the Engineer’s review for appropriateness and cybersecurity compliance via Department’s Form C-25 (Source of Materials).
The Contractor shall submit the Operations Technology Field Device Security Assessment form to the Engineer for approval before installation of any network capable devices that are not found on the Department’s Operation Technology Critical Infrastructure list, including traffic signal equipment and Intelligent Transportation System (ITS). All proposed devices for use on the Department’s network shall be inspected and reviewed by the Department for compliance with current Commonwealth of Virginia Information Security Standards. This inspection and review process will involve device testing for cybersecurity vulnerabilities overseen by the Department’s Office of Information Security (OIS) and Operations Technology Division (OTD). The Contractor shall be responsible for coordinating with equipment and software suppliers to complete and submit the required security checklist and device samples to the Department for vetting of items that have not been approved. The Engineer will coordinate the Operations Technology Field Device Security Review with the Department’s Operations Technology Division. The Contractor shall allow 8 months for this review if the device has a cloud component or artificial intelligence. If cloud or artificial intelligence are not involved, then the Contractor should allow for 90 days for review once the initial Operations Technology Field Device Security Assessment form has been submitted.
The Operations Technology Critical Infrastructure list and the Operations Technology Field Device Security Assessment form are located on the Department’s website.
7-28-25 (SPCN)
File details come from the government source that posted it. Updated .