Attachment_J.18_Crash_Data_Acquisition_Network_Setup_Requirements.pdf

C D A N R E Q U I R E M E N T S

Crash Data Acquisition Network

Crash Data Acquisition Network

Please note that the responsible party for selection and installation of a site(s) may be required to respond to each requirement as part of a Certification &

Accreditation (C&A) process.

New Field Site Setup Requirements

The Crash Data Acquisition Network support group is providing contractors field site setup information for new data collection sites to ensure compliance with requirements.

The Crash Data Acquisition Network wants to ensure that any contractor who is awarded a field site(s) within

CDAN complies with the requirements listed below.

Physical Controls

1.1 Facility should have secured access points (doors, windows, ceilings).

1.2 Tenant should have control over keys, pin numbers, access cards to location.

1.3 There should be restricted shared access with other

tenants/landlord.

1.4 Emergency lighting should be in place throughout

the building.

1.5 Fire/smoke detection devices should be present

throughout the building.

1.6 Environmental controls (temperature, humidity) should be controllable by tenant for the identified space.

1.7 Pipes should not be located directly over workspaces

and or computer hardware such as servers or network equipment.

1.8 Deliveries should be made to a secure location

within the space or the building. Packages cannot be left outside or in front of the office door in a publicly accessible space.

Access Controls

2.1 If available, identify any building monitoring

devices (CCTV, guards, and sign in logs) and ensure that the space is included under that monitoring;

identify facility intrusion alarms and procedures.

2.2 Building visitor logs must be maintained for up

to one calendar year.

2.3 There must be a controlled entry to the space so

that visitors can be properly identified.

Networking Controls: Wired

3.1 Internet Service Provider (ISP) must be able

to provide business-class service to facility (10mbps download, 5mbps upload minimum speeds recommended).

3.2 Digital Subscriber Line (DSL) not recommended.

3.3 Internet and telephone line locations must be

secured and restricted access only.

3.4 Cabling within space should not be located within

shared (other tenants adjacent) walls.

3.5 All network cables need to be a at least Category 6

or better.

3.6 Network cables should be subject to best-

practices cable management and not exposed to any environmental hazards.

Networking Controls: Wireless

4.1 If used, local area wireless network must use

a minimum of WPA2 (Personal) private key encryption. WPA2 Enterprise is highly recommended where available.

4.2 Wireless encryption keys must be changed at least

once every 60 days.

4.3 WPS passcode service must be disabled on the

wireless router and any connected devices (range extenders, etc).

4.4 SSID must not provide any identifying information

such as office # or phrases identifying the nature of the work being performed (aka, “DOT OFFICE #12” or “CDAN”). We recommend that the SSID should be comprised of a random string of alpha numeric characters.

4.5 Wireless network must be set to the lowest power

which covers the required service area. Setting the router to max power is NOT recommend and will very likely lead to signal bleed out to unauthorized areas.

Emergency Precautions

5.1 There should be a means to cut power to the systems in

emergency situations.

5.2 Tenant must be able to use short-term uninterruptible

power supplies (UPS).