Attachment 11 - UFGS 25 05 11.pdf

USACE / NAVFAC / AFCEC UFGS- 25 05 11 ( May 2021)

Change 1 - 08/ 23

Pr epar i ng Act i v i t y: USACE Super sedi ng UFGS- 25 05 11 ( November 2017)

UNI FI ED FACI LI TI ES GUI DE SPECI FI CATI ONS

Ref er ences ar e i n agr eement wi t h UMRL dat ed Apr i l 2024

SECTI ON TABLE OF CONTENTS

DI VI SI ON 25 - I NTEGRATED AUTOMATI ON

SECTI ON 25 05 11

CYBERSECURI TY FOR FACI LI TY- RELATED CONTROL SYSTEMS

05/ 21, CHG 1: 08/ 23

PART 1 GENERAL

1. 1 CONTROL SYSTEM APPLI CABI LI TY

1. 2 RELATED REQUI REMENTS

1. 3 REFERENCES

1. 4 DEFI NI TI ONS

1. 4. 1 Admi ni st r at or Account

1. 4. 2 Comput er

1. 4. 3 Cont r ol l er

1. 4. 4 Mi ssi on Space

1. 4. 5 Net wor k

1. 4. 6 Net wor k Connect ed

1. 4. 6. 1 Wi r el ess Net wor k Connect ed

1. 4. 7 Net wor k Medi a

1. 4. 8 User Account Suppor t Level s

1. 4. 8. 1 FULLY Suppor t ed

1. 4. 8. 2 MI NI MALLY Suppor t ed

1. 4. 8. 3 NOT Suppor t ed

1. 4. 9 Manual Local I nput

1. 4. 10 Car d Reader

1. 4. 11 User I nt er f ace

1. 4. 11. 1 Local User I nt er f ace

1. 4. 11. 2 Remot e User I nt er f ace

1. 4. 11. 3 Types of User I nt er f ace ( by capabi l i t y)

1. 4. 11. 3. 1 Read- Onl y User I nt er f ace

1. 4. 11. 3. 2 Li mi t ed User I nt er f ace

1. 4. 11. 3. 3 Ful l User I nt er f ace

1. 4. 11. 3. 4 Vi ew- Onl y User I nt er f ace

1. 4. 11. 4 Ot her User I nt er f ace Ter mi nol ogy

1. 4. 11. 4. 1 Wr i t abl e User I nt er f ace

1. 4. 11. 4. 2 Pr i v i l eged User I nt er f ace

1. 4. 12 Wi r el ess Net wor k

1. 4. 13 Wi r ed Br oadcast Net wor k

1. 5 ADMI NI STRATI VE REQUI REMENTS

SECTI ON 25 05 11 Page 1

1. 5. 1 Poi nt s of Cont act

1. 5. 2 Coor di nat i on

1. 6 SUBMI TTALS

1. 7 QUALI TY CONTROL

1. 7. 1 Regul at or y Requi r ement s

1. 7. 2 [ Cer t i f i cat i ons] [ Qual i f i cat i ons]

1. 7. 3 Pr e- Const r uct i on Test i ng

1. 8 DELI VERY, STORAGE, AND HANDLI NG

1. 9 CYBERSECURI TY DOCUMENTATI ON

1. 9. 1 Pr oposed STI G and SRG Appl i cabi l i t y Repor t

1. 9. 2 Cyber secur i t y I nt er connect i on Schedul e

1. 9. 3 Net wor k Communi cat i on Repor t

1. 9. 4 Cont r ol Syst em I nvent or y Repor t

1. 9. 5 Sof t war e and Conf i gur at i on Backups

1. 9. 6 Cyber secur i t y Ri ser Di agr am

1. 9. 7 STI G, SRG and Vendor Gui de Compl i ance Resul t Repor t

1. 9. 8 Cont r ol Syst em Cyber secur i t y Document at i on

1. 9. 8. 1 Sof t war e Appl i cat i ons

1. 9. 8. 2 For HVAC Cont r ol Syst em Devi ces

1. 9. 8. 2. 1 HVAC Cont r ol Syst em Devi ces FULLY Suppor t i ng User

Account s

1. 9. 8. 2. 2 Al l Ot her HVAC Cont r ol Syst em Devi ces

1. 9. 8. 3 For Li ght i ng Cont r ol Syst em Devi ces

1. 9. 8. 3. 1 Li ght i ng Cont r ol Syst em Devi ces FULLY Suppor t i ng User

Account s

1. 9. 8. 3. 2 Al l Ot her Li ght i ng Cont r ol Syst em Devi ces

1. 9. 8. 4 [ _____] Cont r ol Syst em Devi ces

1. 9. 8. 5 Def aul t Requi r ement s f or Cont r ol Syst em Devi ces

1. 10 SOFTWARE LI CENSI NG

1. 11 CYBERSECURI TY DURI NG CONSTRUCTI ON

1. 11. 1 Cont r act or Comput er Equi pment

1. 11. 1. 1 Oper at i ng Syst em

1. 11. 1. 2 Ant i - Mal war e Sof t war e

1. 11. 1. 3 Passwor ds and Passphr ases

1. 11. 1. 4 User - Based Aut hent i cat i on

1. 11. 1. 5 Demonst r at i on of Compl i ance

1. 11. 1. 6 Cont r act or Comput er Cyber secur i t y Compl i ance St at ement s

1. 11. 2 Tempor ar y I P Net wor ks

1. 11. 2. 1 Net wor k Boundar i es and Connect i ons

1. 11. 3 Gover nment Access t o Net wor k

1. 11. 4 Tempor ar y Wi r el ess I P Net wor ks

1. 11. 5 Passwor ds and Passphr ases

1. 11. 6 Cont r act or Tempor ar y Net wor k Cyber secur i t y Compl i ance

St at ement s

1. 12 CYBERSECURI TY DURI NG WARRANTY PERI OD

PART 2 PRODUCTS

2. 1 ETHERNET SWI TCH

2. 1. 1 Requi r ed Funct i onal i t y

2. 1. 2 Conf i gur at i on Requi r ement s

2. 2 DAI SY CHAI N I P CONTROLLERS

2. 3 DATABASE AND WEB SERVER SOFTWARE FOR MODERATE I MPACT SYSTEMS

PART 3 EXECUTI ON

3. 1 CYBERSECURI TY HARDENI NG AND CONFI GURATI ON GUI DES

3. 2 NETWORK REQUI REMENTS

3. 2. 1 I nf or mat i on Fl ow Enf or cement I n MODERATE I mpact Syst ems

SECTI ON 25 05 11 Page 2

3. 2. 2 Wi r el ess and Wi r ed Br oadcast Communi cat i on f or Fi r e Pr ot ect i on Syst ems

3. 2. 3 Wi r el ess and Wi r ed Br oadcast Communi cat i on f or Syst ems Ot her t han Fi r e Pr ot ect i on Syst ems

3. 2. 3. 1 Wi r el ess and Wi r ed Br oadcast I P Communi cat i ons

3. 2. 3. 2 Non- I P Wi r el ess Communi cat i on

3. 2. 3. 3 Wi r el ess and Wi r ed Br oadcast Communi cat i on Request

3. 2. 3. 4 Wi r el ess Communi cat i on Test i ng

3. 2. 4 Non- I P Cont r ol Net wor ks

3. 2. 5 I P Cont r ol Net wor ks

3. 2. 5. 1 I P Net wor k Rout er s

3. 2. 5. 2 I P Devi ces Wi t h Mul t i pl e Et her net Connect i on

3. 2. 6 Cr ypt ogr aphi c Pr ot ect i on

3. 2. 7 Devi ce I dent i f i cat i on and Aut hent i cat i on

3. 2. 7. 1 For HVAC Cont r ol Syst em Devi ces

3. 2. 7. 2 For Li ght i ng Cont r ol Syst em Devi ces

3. 2. 7. 3 [ _____] Cont r ol Syst em Devi ces

3. 2. 7. 4 Def aul t Requi r ement s f or Cont r ol Syst em Devi ces

3. 2. 8 Cr ypt ogr aphi c Modul e Aut hent i cat i on

3. 3 ACCESS CONTROL REQUI REMENTS

3. 3. 1 User Account s

3. 3. 1. 1 Comput er s

3. 3. 1. 2 Cont r ol l er s

3. 3. 1. 2. 1 HVAC Cont r ol Syst ems

3. 3. 1. 2. 2 Li ght i ng Cont r ol Syst ems

3. 3. 1. 2. 3 El ect r oni c Secur i t y Syst ems ( ESS)

3. 3. 1. 2. 4 Fi r e Pr ot ect i on Syst ems

3. 3. 1. 2. 5 [ _____] Cont r ol Syst ems

3. 3. 1. 2. 6 Def aul t Requi r ement s f or Ot her Cont r ol Syst ems

3. 3. 1. 3 Addi t i onal User Account Expi r at i on Requi r ement s I n

MODERATE I mpact Syst ems:

3. 3. 1. 3. 1 For Cont r ol Syst em Appl i cat i ons Runni ng on Comput er s

3. 3. 1. 3. 2 For Ot her Cont r ol Syst em Devi ces FULLY Suppor t i ng

Account s

3. 3. 2 Unsuccessf ul Logon At t empt s

3. 3. 2. 1 Devi ces MI NI MALLY Suppor t i ng Account s

3. 3. 2. 2 Devi ces FULLY Suppor t i ng Account s

3. 3. 2. 3 Hi gh Avai l abi l i t y I nt er f aces Exempt f r om Unsuccessf ul

Logon At t empt s Requi r ement s

3. 3. 3 Syst em Use Not i f i cat i on

3. 3. 3. 1 Syst em Use Not i f i cat i on f or Remot e User I nt er f aces

3. 3. 3. 2 Syst em Use Not i f i cat i on f or Local User I nt er f aces

3. 3. 4 Sessi on Lock and Sessi on Ter mi nat i on Requi r ement s I n MODERATE

I mpact Syst ems:

3. 3. 4. 1 Sessi on Ter mi nat i on

3. 3. 4. 2 Sessi on Lock

3. 3. 4. 3 Sessi on Lock and Ter mi nat i on f or Comput er s

3. 3. 4. 4 Sessi on Lock and Ter mi nat i on f or Cont r ol l er s

3. 3. 4. 5 Sessi on Lock and Ter mi nat i on Except i ons

3. 3. 5 Per mi t t ed Act i ons Wi t hout I dent i f i cat i on or Aut hent i cat i on

3. 3. 6 Physi cal Secur i t y i n MODERATE I mpact Syst ems

3. 3. 6. 1 Physi cal Secur i t y f or Medi a

3. 3. 6. 1. 1 Physi cal Secur i t y f or Medi a I nsi de Mi ssi on Space

3. 3. 6. 1. 2 Physi cal Secur i t y f or Medi a Out si de Mi ssi on Space

3. 3. 6. 1. 3 Physi cal Secur i t y f or Non- Net wor k Medi a i n Fi r e

Pr ot ect i on Syst ems

3. 3. 6. 2 Physi cal Secur i t y f or Devi ces

3. 3. 6. 2. 1 Physi cal Secur i t y f or Devi ces i n Fi r e Pr ot ect i on

Syst ems

SECTI ON 25 05 11 Page 3

3. 3. 6. 3 Physi cal Secur i t y f or User I nt er f aces

3. 3. 6. 4 Addi t i onal Physi cal Secur i t y f or Conf i dent i al i t y of User

I nt er f aces and Pr i nt er s

3. 3. 7 Encl osur es

3. 4 USER I DENTI FI CATI ON AND AUTHENTI CATI ON

3. 4. 1 User I dent i f i cat i on and Aut hent i cat i on f or Al l Syst em Types

3. 4. 2 User I dent i f i cat i on and Aut hent i cat i on f or Speci f i c Syst em

Types

3. 4. 2. 1 HVAC Cont r ol Syst ems Devi ces

3. 4. 2. 2 Li ght i ng Cont r ol Syst ems Devi ces

3. 4. 2. 3 El ect r oni c Secur i t y Syst em Devi ces

3. 4. 2. 4 [ _____] Cont r ol Syst em Devi ces

3. 4. 3 User I dent i f i cat i on and Aut hent i cat i on f or Speci f i c Devi ces

3. 4. 3. 1 [ _____]

3. 4. 4 I mpl ement at i on of I dent i f i cat i on and Aut hor i zat i on Requi r ement s

3. 4. 5 Passwor d- Based Aut hent i cat i on Requi r ement s

3. 4. 5. 1 Passwor ds f or Sof t war e and Appl i cat i ons Runni ng on

Comput er s

3. 4. 5. 2 Passwor ds f or Cont r ol l er s FULLY Suppor t i ng Account s

3. 4. 5. 3 Passwor ds f or Remot e I nt er f aces

3. 4. 5. 4 Passwor ds f or Devi ces Mi ni mal l y Suppor t i ng Account s

3. 4. 5. 5 Passwor d Conf i gur at i on and Repor t i ng

3. 4. 6 Aut hent i cat or Feedback

3. 4. 7 I mpl ement at i on of PKI I nf r ast r uct ur e i n MODERATE I mpact Syst ems

3. 5 CYBERSECURI TY AUDI TI NG

3. 5. 1 Audi t Event s, Cont ent of Audi t Recor ds, and Audi t Gener at i on

3. 5. 1. 1 Comput er s

3. 5. 1. 1. 1 Audi t ed Event s

3. 5. 1. 1. 2 Audi t Event I nf or mat i on To Recor d

3. 5. 1. 2 For HVAC Cont r ol Syst em Cont r ol l er s

3. 5. 1. 2. 1 HVAC Cont r ol Syst em Cont r ol l er s FULLY Suppor t i ng User

Account s

3. 5. 1. 2. 1. 1 Audi t ed Event s

3. 5. 1. 2. 1. 2 Audi t Event I nf or mat i on To Recor d

3. 5. 1. 2. 2 Ot her HVAC Cont r ol Syst em Cont r ol l er s

3. 5. 1. 3 For Li ght i ng Cont r ol Syst em Cont r ol l er

3. 5. 1. 3. 1 Li ght i ng Cont r ol Syst em Cont r ol l er s FULLY Suppor t i ng

User Account s

3. 5. 1. 3. 1. 1 Audi t ed Event s

3. 5. 1. 3. 1. 2 Audi t Event I nf or mat i on To Recor d

3. 5. 1. 3. 2 Ot her Li ght i ng Cont r ol Syst em Cont r ol l er s

3. 5. 1. 4 [ _____] Cont r ol Syst em Cont r ol l er s

3. 5. 1. 5 Def aul t Requi r ement s f or Cont r ol Syst em Cont r ol l er s

3. 5. 1. 5. 1 Cont r ol l er s Whi ch FULLY Suppor t Account s

3. 5. 1. 5. 1. 1 Audi t ed Event s

3. 5. 1. 5. 1. 2 Audi t Event I nf or mat i on To Recor d

3. 5. 1. 5. 2 Cont r ol l er s Whi ch Do Not FULLY Suppor t Account s

3. 5. 2 Audi t Ti me St amps

3. 5. 3 Audi t i ng Fr ont End Sof t war e

3. 5. 3. 1 I mpor t and Upl oad Requi r ement s

3. 5. 3. 2 Expor t Requi r ement s

3. 5. 3. 3 Not i f i cat i on Of Audi t Fai l ur e i n Devi ces i n MODERATE

I mpact Syst ems

3. 5. 3. 4 Audi t Reduct i on and Repor t Gener at i on I n MODERATE I mpact

Syst ems

3. 5. 4 Audi t St or age Capaci t y and Audi t Upl oad

3. 5. 4. 1 Audi t Log St or age Not i f i cat i on I n MODERATE I mpact Syst ems

3. 5. 4. 2 Devi ce Audi t Recor d Upl oad Sof t war e

3. 5. 5 Response t o Audi t Pr ocessi ng Fai l ur es

SECTI ON 25 05 11 Page 4

3. 6 REQUI REMENTS FOR LEAST FUNCTI ONALI TY

3. 6. 1 Devi ce Capabi l i t i es

3. 6. 2 Sof t war e

3. 7 SYSTEM AND COMMUNI CATI ON PROTECTI ON

3. 7. 1 Col l abor at i ve Comput i ng

3. 7. 2 Deni al of Ser vi ce Pr ot ect i on and Appl i cat i on Par t i t i oni ng I n

MODERATE I mpact Syst ems:

3. 7. 2. 1 Net wor k Rel i ance i n MODERATE I mpact HVAC Cont r ol Syst ems

3. 7. 2. 2 Net wor k Rel i ance i n MODERATE I mpact Li ght i ng Cont r ol

Syst ems

3. 7. 2. 3 Net wor k Rel i ance i n MODERATE I mpact [ _____] Cont r ol Syst ems

3. 7. 2. 4 Def aul t Requi r ement s f or MODERATE I mpact Cont r ol Syst ems

3. 7. 3 Mobi l e Code I n MODERATE I mpact Syst ems:

3. 7. 4 Pr ot ect i on of I nf or mat i on at Rest I n MODERATE I mpact Syst ems:

3. 7. 5 Pr ocess I sol at i on and Boundar y Pr ot ect i on i n Moder at e I mpact

Fi r e Pr ot ect i on Syst ems

3. 7. 5. 1 Radi o I nt er f aces f or Fi r e Pr ot ect i on Syst ems

3. 7. 5. 2 Fi r e Suppr essi on Syst em Net wor k I sol at i on

3. 8 SAFE MODE AND FAI L SAFE OPERATI ON

3. 9 SYSTEM MAI NTENANCE TOOL SOFTWARE

3. 10 DEVI CE POWER

3. 10. 1 Devi ce Behavi or on Loss of Power I n MODERATE I mpact Syst ems:

3. 11 VULNERABI LI TY SCANNI NG

3. 11. 1 Comput er s and Sof t war e Runni ng on Comput er s

3. 11. 2 Cont r ol l er s

3. 12 FI PS 201- 2 REQUI REMENT

3. 13 SYSTEM AND I NTEGRATI ON I NTEGRI TY

3. 13. 1 Mal i c i ous Code Pr ot ect i on

3. 13. 2 Sof t war e, Fi r mwar e, and I nf or mat i on I nt egr i t y I n MODERATE

I mpact Syst ems:

3. 13. 3 I nf or mat i on Syst em Moni t or i ng

3. 14 CONTROL SYSTEM CYBERSECURI TY TESTI NG

3. 14. 1 Cont r ol Syst em Cyber secur i t y Test i ng Pr ocedur es

3. 14. 2 Cont r ol Syst em Cyber secur i t y Test i ng Execut i on

3. 14. 3 Cont r ol Syst em Cyber secur i t y Test i ng Repor t

3. 15 FI ELD QUALI TY CONTROL, CYBERSECURI TY VALI DATI ON SUPPORT

3. 16 CYBERSECURI TY TRAI NI NG

- - End of Sect i on Tabl e of Cont ent s - -

SECTI ON 25 05 11 Page 5

USACE / NAVFAC / AFCEC UFGS- 25 05 11 ( May 2021)

Change 1 - 08/ 23

Pr epar i ng Act i v i t y: USACE Super sedi ng UFGS- 25 05 11 ( November 2017)

UNI FI ED FACI LI TI ES GUI DE SPECI FI CATI ONS

Ref er ences ar e i n agr eement wi t h UMRL dat ed Apr i l 2024

SECTI ON 25 05 11

CYBERSECURI TY FOR FACI LI TY- RELATED CONTROL SYSTEMS

05/ 21, CHG 1: 08/ 23

NOTE: Thi s gui de speci f i cat i on cover s t he r equi r ement s f or cyber secur i t y f or LOW and MODERATE i mpact f aci l i t y- r el at ed cont r ol syst ems t o meet t he r equi r ement s of t he Depar t ment of Def ense Ri sk Management Fr amewor k ( RMF) .

Adher e t o UFC 1- 300- 02 Uni f i ed Faci l i t i es Gui de Speci f i cat i ons ( UFGS) For mat St andar d when edi t i ng t hi s gui de speci f i cat i on or pr epar i ng new pr oj ect speci f i cat i on sect i ons. Edi t t hi s gui de speci f i cat i on f or pr oj ect speci f i c r equi r ement s by addi ng, del et i ng, or r evi s i ng t ext . For br acket ed i t ems, choose appl i cabl e i t em( s) or i nser t appr opr i at e i nf or mat i on.

Remove i nf or mat i on and r equi r ement s not r equi r ed i n r espect i ve pr oj ect , whet her or not br acket s ar e pr esent .

Comment s, suggest i ons and r ecommended changes f or t hi s gui de speci f i cat i on ar e wel come and shoul d be as a Cr i t er i a Change Request ( CCR) .

Not e: Faci l i t y- r el at ed cont r ol syst ems ar e a subset of cont r ol syst ems t hat ar e used t o moni t or and cont r ol equi pment and syst ems r el at ed t o DoD r eal pr oper t y f aci l i t i es ( e. g. , bui l di ng cont r ol syst ems, ut i l i t y cont r ol syst ems, el ect r oni c secur i t y syst ems, and f i r e and l i f e saf et y syst ems) . Thi s sect i on i ncl udes Cyber secur i t y r equi r ement s t o be i ncl uded on ever y DoD pr oj ect whi ch i ncl udes a f aci l i t y- r el at ed cont r ol syst em. Thi s Sect i on does not pr ovi de gener al r equi r ement s f or a cont r ol syst em, nor ar e t he r equi r ement s i n t hi s sect i on suf f i c i ent t o pr ocur e a cont r ol syst em. Thi s sect i on must be used i n conj unct i on wi t h anot her

SECTI ON 25 05 11 Page 6 cont r ol s syst em speci f i cat i on. For exampl e, f or a HVAC cont r ol s pr oj ect , t hi s sect i on shoul d be used i n conj unct i on wi t h Sect i on 23 09 00 and r el at ed sect i ons.

Requi r ement s and act i v i t i es i n t hi s sect i on must be coor di nat ed wi t h t he ot her r el evant cont r ol speci f i cat i on sect i ons. Requi r ement s speci f i c t o Cyber secur i t y shoul d be i ncor por at ed i nt o t hi s sect i on, and r equi r ement s not speci f i c t o Cyber secur i t y shoul d be i ncl uded i n t he appr opr i at e cont r ol s sect i on.

Thi s sect i on i ncl udes r equi r ement s i n suppor t of t he DoD Ri sk Management Fr amewor k ( RMF) f or i mpl ement i ng cyber secur i t y. Ref er t o UFC 4- 010- 06, Cyber secur i t y f or Faci l i t y- Rel at ed Cont r ol Syst ems f or r equi r ement s on i ncor por at i ng cyber secur i t y i nt o cont r ol syst em desi gn and f or gener al i nf or mat i on on t he RMF pr ocess as i t appl i es t o cont r ol syst ems.

Assi st ance f or cont r ol syst em cyber secur i t y i s avai l abl e f r om t he f ol l owi ng Ser vi ce or gani zat i ons:

Ar my: Cont r ol Syst em Cyber secur i t y Mandat or y Cent er of Exper t i se ( CSC- MCX) , Hunt svi l l e Engi neer i ng and Suppor t Cent er ( CSC- MCX@usace. ar my. mi l ) .

Navy ( and Mar i ne Cor ps) : Naval Faci l i t i es Engi neer i ng Syst ems Command, Command I nf or mat i on Of f i ce ( CI O) Naval Faci l i t i es Engi neer i ng Command, Command I nf or mat i on Of f i ce ( CI O)

Ai r For ce ( and Space For ce) : Ai r For ce Ci vi l Engi neer i ng Cent er ( AFCEC) Oper at i ons Di r ect or at e, Tyndal l Ai r For ce Base

Si nce t hi s Sect i on cover s a wi de r ange of cont r ol syst ems, and t hose syst ems of t en have di f f er ent capabi l i t i es and r equi r ement s, t her e ar e r equi r ement s i dent i f i ed i n t hi s Sect i on whi ch need ext ensi ve desi gner i nput or deci s i ons.

Many desi gner sel ect i ons i n t hi s Sect i on wi l l r equi r e coor di nat i on wi t h t he pr oj ect s i t e, Syst em Owner , Aut hor i z i ng Of f i c i al or a subj ect mat t er exper t i n t he speci f i c cont r ol syst ems bei ng i nst al l ed.

NOTE: Thi s Gui de Speci f i cat i on i s f or use on cont r ol syst ems havi ng no i mpact r at i ng hi gher t han MODERATE. I f t he pr oj ect i ncl udes syst ems wi t h i mpact r at i ngs of HI GH, t hi s speci f i cat i on must be modi f i ed t o i ncl ude t hose addi t i onal r equi r ement s.

Syst ems of di f f er ent t ypes at t he same i mpact l evel

SECTI ON 25 05 11 Page 7 may have di f f er ent r equi r ement s based on t he speci f i c needs and capabi l i t i es of t he cont r ol syst em. Thi s i s addr essed i n t hi s Gui de Speci f i cat i on by i ndi cat i ng when r equi r ement s appl y t o a speci f i c syst em t ype.

Syst ems of t he same t ype may have di f f er ent r equi r ement s. Thi s may be due t o t hose syst ems havi ng di f f er ent i mpact l evel s or due t o syst em- speci f i c r equi r ement s f or syst ems at t he same i mpact l evel .

I f a pr oj ect i ncl udes mul t i pl e syst ems, i t ' s cr i t i cal t hat i t be c l ear whi ch r equi r ement s appl y t o whi ch syst ems. Thi s can be done by a) usi ng a s i ngl e Sect i on and speci f y i ng t he appl i cabi l i t y of r equi r ement s ( i ndi cat i ng f or each syst em what i mpact l evel and syst em t ype i t i s) or b) usi ng mul t i pl e Sect i ons. Whi ch appr oach t o empl oy depends on t he needs of t he pr oj ect and t he pr ef er ences of t he speci f i er and pr oj ect manager . I f usi ng mul t i pl e sect i ons use t he f our t h l evel speci f i cat i on number i ng t o di f f er ent i at e t he Sect i ons and i ndi cat e i n each whi ch syst ems t he Sect i on appl i es t o, f or exampl e, one pr oj ect may have:

1) Sect i on 25 05 11. 01 CYBERSECURI TY FOR LOW I MPACT

HVAC CONTROL SYSTEMS

2) Sect i on 25 05 11. 02 CYBERSECURI TY FOR LOW I MPACT

LI GHTI NG SYSTEMS

3) Sect i on 25 05 11. 03 CYBERSECURI TY FOR MODERATE

I MPACT ELECTRONI C SECURI TY SYSTEMS

( The f our t h l evel number i ng i s not r equi r ed t o be sequent i al , as l ong as t he mappi ng bet ween t he cyber secur i t y speci f i cat i on and t he cont r ol syst em i s c l ear . Some pr oj ect s may wi sh t o use f our t h l evel number i ng t hat mat ches t he di v i s i on t hey suppor t ( 25 05 11. 23 f or HVAC ( mechani cal ) f or exampl e) . )

I n accor dance wi t h UFC 4- 010- 06, f or pr oj ect s desi gned by or under cont r act t o USACE use mul t i pl e speci f i cat i ons as descr i bed i n t hi s not e, wher e each syst em has a cor r espondi ng cyber secur i t y sect i on whi ch i s i ncl uded wi t h t he sect i on( s) speci f y i ng t he cont r ol syst em.

NOTE: Thi s speci f i cat i on makes use of SpecsI nt act Tai l or i ng Opt i ons.

Ser vi ces t ai l or i ng opt i ons:

Ar my Ai r For ce

SECTI ON 25 05 11 Page 8

I mpact Level t ai l or i ng opt i ons:

LOW I mpact MODERATE I mpact

Cont r ol syst em t ype t ai l or i ng opt i ons:

HVAC Cont r ol Syst ems Li ght i ng Cont r ol Syst ems El ect r oni c Secur i t y Syst ems ( ESS) Fi r e Pr ot ect i on Syst ems Desi gner Speci f i ed Requi r ement s Def aul t Requi r ement s

Cur r ent l y, al l t ext i n Fi r e Pr ot ect i on t ags i s al so wi t hi n MODERATE I mpact t ags, and LOW I mpact Fi r e Pr ot ect i on syst ems ar e addr essed by t he def aul t r equi r ement s.

These t ai l or i ng opt i ons af f ect t he subpar t s t hat ar e i ncl uded t hr oughout t he speci f i cat i on t o " br eak out " speci f i c r equi r ement s. The " Def aul t Requi r ement s" t ai l or i ng opt i on i ncl udes " gener i c" r equi r ement s t hat ar e i nt ended t o appl y t o a wi de r ange of cont r ol syst ems. The " Desi gner Speci f i ed Requi r ement s" t ai l or i ng opt i on wi l l i ncl ude bl ank subpar t s f or t he speci f i cat i on of r equi r ement s, and i s i nt ended t o be used when cust omi zi ng r equi r ement s t o a cont r ol syst em t ype f or whi ch t her e i s no speci f i c t ai l or i ng opt i on and f or whi ch t he " Def aul t Requi r ement s" ar e not appl i cabl e.

I ncl ude onl y t ai l or i ng opt i ons f or t he speci f i cat i ons t o be addr essed. Onl y i ncl ude " Def aul t Requi r ement s" i f t he sect i on i s t o cover a syst em not cover ed by one of t he speci f i c syst em t ype opt i ons AND t he " Def aul t Requi r ement s" ar e adequat e. Onl y i ncl ude " Desi gner Speci f i ed Requi r ement s" i f t he sect i on i s t o cover a syst em not cover ed by one of t he speci f i c syst em t ype opt i ons, AND t he " Def aul t Requi r ement s" ar e NOT adequat e. When sel ect i ng " Desi gner Speci f i ed Requi r ement s" , r equi r ement s must be added t hr oughout t he speci f i cat i on.

PART 1 GENERAL

NOTE: As descr i bed i n t he par agr aph bel ow, t hi s Sect i on i ncl udes t ext i n cur l y br aces ( " { " and " } " ) i ndi cat i ng whi ch cyber secur i t y cont r ol and cont r ol cor r el at i on i dent i f i er ( CCI ) t he r equi r ement s of t he subpar t r el at e t o. When edi t i ng t hi s speci f i cat i on t o i ncor por at e r equi r ement s f or ot her cont r ol s or CCI s or t o r emove r equi r ement s r el at ed t o speci f i c

SECTI ON 25 05 11 Page 9 cont r ol s or CCI s, r evi se t he l i s t of cont r ol s and CCI s accor di ngl y. DO NOT REMOVE THE TEXT I N CURLY BRACES i n t he f i nal speci f i cat i on; t hi s i nf or mat i on i s needed f or r ef er ence dur i ng const r uct i on, commi ssi oni ng and cyber secur i t y assessment s. .

NOTE: Thi s subpar t poi nt s t he cont r act or t o t he l ocat i ons of STI Gs and SRGs, as t hi s Sect i on r equi r es t he cont r act or t o meet avai l abl e STI Gs or SRGs. I t ' s not necessar y f or t he desi gner / speci f i er t o r evi ew t he STI Gs or SRGs f or appl i cabi l i t y . The cont r act or i s r esponsi bl e f or det er mi ni ng whi ch STI Gs or SRGs ar e appl i cabl e and f or meet i ng t he r el evant r equi r ement s.

Whi l e most STI Gs/ SRGs do not r equi r e a CAC t o access, FOUO STI Gs/ SRGs do. See t he SRG- STI G Compi l at i on Read- Me f or mor e i nf or mat i on -ht t ps: / / dl . dod. cyber . mi l / wp- cont ent / upl oads/ st i gs/ pdf / U_STI G_Li br ar y- zi p_Read- ME_v1- 07. pdf

Many subpar t s i n t hi s Sect i on cont ai n t ext i n cur l y br aces ( " { " and " } " ) i ndi cat i ng whi ch cyber secur i t y cont r ol and cont r ol cor r el at i on i dent i f i er ( CCI ) t he r equi r ement s of t he subpar t r el at e t o. The t ext i nsi de t hese cur l y br aces i s f or Gover nment r ef er ence onl y and enabl es coor di nat i on of t he r equi r ement s of t hi s Sect i on wi t h t he RMF pr ocess t hr oughout t he desi gn and const r uct i on pr ocess. Text i n cur l y br aces ar e not cont r act or r equi r ement s.

Thi s Sect i on r ef er s t o Secur i t y Requi r ement s Gui de ( SRGs) and Secur i t y Techni cal I mpl ement at i on Gui de ( STI Gs) . STI Gs and SRGs ar e avai l abl e onl i ne at t he I nf or mat i on Assur ance Suppor t Envi r onment ( I ASE) websi t e at ht t ps: / / publ i c. cyber . mi l / st i gs/ downl oads/ and an SRG/ STI G Appl i cabi l i t y Gui de and Col l ect i on Tool i s avai l abl e at ht t ps: / / publ i c. cyber . mi l / st i gs/ SCAP/ . Not al l cont r ol syst em component s have appl i cabl e STI Gs or SRGs. The " Cont r ol Syst ems SRG" does not appl y t o wor k per f or med under t hi s Sect i on; al l r equi r ement s wi t hi n t hi s sect i on t o appl y appl i cabl e SRGs DO NOT i ncl ude t he " Cont r ol Syst ems SRG" .

[ 1. 1 CONTROL SYSTEM APPLI CABI LI TY

NOTE: I f mul t i pl e ver si ons of t hi s Sect i on ar e used on a s i ngl e pr oj ect , keep t hi s subpar t and l i s t al l t he syst ems t o whi ch t hi s speci f i c ver si on of t he Sect i on appl i es.

Ther e ar e mul t i pl e ver si ons of t hi s Sect i on associ at ed wi t h t hi s pr oj ect .

Di f f er ent ver si ons have r equi r ement s appl i cabl e t o di f f er ent cont r ol syst ems. Thi s speci f i c Sect i on appl i es onl y t o t he f ol l owi ng cont r ol syst ems: [ _____] .

SECTI ON 25 05 11 Page 10

] 1. 2 RELATED REQUI REMENTS

Thi s sect i on does not cont ai n suf f i c i ent r equi r ement s t o pr ocur e a cont r ol syst em and must be used i n conj unct i on wi t h ot her Sect i ons whi ch speci f y cont r ol syst ems. Thi s Sect i on adds cyber secur i t y r equi r ement s t o t he cont r ol syst ems speci f i ed i n ot her Sect i ons, and as t hese r equi r ement s ar e condi t i oned on t he cont r ol syst em bei ng pr ovi ded, t her e may be r equi r ement s i n t hi s Sect i on t hat wi l l not appl y t o t hi s pr oj ect . Al l Sect i ons cont ai ni ng f aci l i t y- r el at ed cont r ol syst ems or cont r ol syst em component s ar e r el at ed t o t he r equi r ement s of t hi s Sect i on. Revi ew al l speci f i cat i on sect i ons t o det er mi ne r el at ed r equi r ement s.

I n cases wher e a r equi r ement i s speci f i ed i n bot h t hi s Sect i on and i n anot her Sect i on, t he mor e st r i ngent r equi r ement must be met . I n cases wher e a r equi r ement i n t hi s Sect i on conf l i c t s wi t h t he r equi r ement s of anot her Sect i on such t hat bot h r equi r ement s cannot be met at t he same t i me, r equest di r ect i on f r om t he [ Cont r act i ng Of f i cer Repr esent at i ve] [ _____] t o det er mi ne whi ch r equi r ement appl i es t o t he pr oj ect .

1. 3 REFERENCES

NOTE: Thi s par agr aph i s used t o l i s t t he publ i cat i ons c i t ed i n t he t ext of t he gui de speci f i cat i on. The publ i cat i ons ar e r ef er r ed t o i n t he t ext by basi c desi gnat i on onl y and l i s t ed i n t hi s par agr aph by or gani zat i on, desi gnat i on, dat e, and t i t l e.

Use t he Ref er ence Wi zar d' s Check Ref er ence f eat ur e when you add a RI D out si de of t he Sect i on' s Ref er ence Ar t i c l e t o aut omat i cal l y pl ace t he r ef er ence i n t he Ref er ence Ar t i c l e. Al so use t he Ref er ence Wi zar d' s Check Ref er ence f eat ur e t o updat e t he i ssue dat es.

Ref er ences not used i n t he t ext wi l l aut omat i cal l y be del et ed f r om t hi s sect i on of t he pr oj ect speci f i cat i on when you choose t o r econci l e r ef er ences i n t he publ i sh pr i nt pr ocess.

The publ i cat i ons l i s t ed bel ow f or m a par t of t hi s speci f i cat i on t o t he ext ent r ef er enced. The publ i cat i ons ar e r ef er r ed t o wi t hi n t he t ext by t he basi c desi gnat i on onl y.

AMERI CAN SOCI ETY OF HEATI NG, REFRI GERATI NG AND AI R- CONDI TI ONI NG

ENGI NEERS ( ASHRAE)

ASHRAE 135 ( 2020; I nt er pr et at i on 1- 8 2021; Er r at a 1- 2 2021; Addenda CD 2021; Addenda BV- CE 2022;

I nt er pr et at i on 9- 12 2022; I nt er pr et at i on 13- 24 2023; Addenda BV- CF 2023; Er r at a 3 2023) BACnet —A Dat a Communi cat i on Pr ot ocol f or Bui l di ng Aut omat i on and Cont r ol Net wor ks

SECTI ON 25 05 11 Page 11

I NSTI TUTE OF ELECTRI CAL AND ELECTRONI CS ENGI NEERS ( I EEE)

I EEE 802. 1x ( 2010) Local and Met r opol i t an Ar ea Net wor ks - Por t Based Net wor k Access Cont r ol

I NTERNET ENGI NEERI NG TASK FORCE ( I ETF)

I ETF RFC 2819 ( 2000) Remot e Net wor k Moni t or i ng ( RMON) Management I nf or mat i on Base ( MI B)

NATI ONAL I NSTI TUTE OF STANDARDS AND TECHNOLOGY ( NI ST)

NI ST FI PS 140- 2 ( 2001) Secur i t y Requi r ement s f or Cr ypt ogr aphi c Modul es

NI ST FI PS 201- 2 ( 2013) Per sonal I dent i t y Ver i f i cat i on ( PI V) of Feder al Empl oyees and Cont r act or s

U. S. DEPARTMENT OF DEFENSE ( DOD)

DODI 8551. 01 ( 2014) Por t s, Pr ot ocol s, and Ser vi ces Management ( PPSM)

DTM 08- 060 ( 2008) Pol i cy on Use of Depar t ment of Def ense ( DoD) I nf or mat i on Syst ems - St andar d Consent Banner and User Agr eement

1. 4 DEFI NI TI ONS

1. 4. 1 Admi ni st r at or Account

An admi ni st r at or account i s an account wi t h f ul l per mi ssi ons t o a devi ce, appl i cat i on, or oper at i ng syst em, i ncl udi ng t he abi l i t y t o cr eat e and modi f y ot her user account s.

Not e t hat t he oper at i ng syst em Admi ni st r at or Account may be di f f er ent t han Admi ni st r at or Account s f or appl i cat i ons host ed on t hat oper at i ng syst em.

Al so, most cont r ol l er s wi l l not have any suppor t f or account s and wi l l t her ef or e not have an ' Admi ni st r at or Account ' .

1. 4. 2 Comput er

A comput er i s one of t he f ol l owi ng:

a. a devi ce r unni ng a non- embedded deskt op or ser ver ver si on of Mi cr osof t Wi ndows

b. a devi ce r unni ng a non- embedded ver si on of MacOS

c. a devi ce r unni ng a non- embedded ver si on of Li nux

d. a devi ce r unni ng a ver si on or der i vat i ve of t he Andr oi d Oper at i ng Syst em, wher e Andr oi d i s consi der ed separ at e f r om Li nux

e. a devi ce r unni ng a ver si on of Appl e i OS

Unl ess ot her wi se i ndi cat ed or c l ear f r om cont ext use of t he wor d " devi ce"

SECTI ON 25 05 11 Page 12 i n t hi s Sect i on i ncl udes comput er s.

1. 4. 3 Cont r ol l er

A devi ce ot her t han a comput er or Et her net swi t ch. For Fi r e Pr ot ect i on syst ems t hi s i ncl udes f i r e al ar m cont r ol panel s, r emot e oper at i ng consol es, and r emot e annunci at or s.

1. 4. 4 Mi ssi on Space

NOTE: Def i ne " Mi ssi on space" such t hat t he cont r act or i s abl e t o det er mi ne when a net wor k or devi ce i s out si de of t he mi ssi on ar ea. Coor di nat e t he def i ni t i on of Mi ssi on Space wi t h t he physi cal secur i t y desi gn and t he secur i t y or gani zat i on at t he pr oj ect s i t e.

Sel ect whet her t o l eave t he def i ni t i on or t o def i ne mi ssi on space on a dr awi ng.

[ A devi ce or medi a i s i n mi ssi on space i f physi cal access t o t he devi ce or medi a i s cont r ol l ed by t he or gani zat i on ser ved by t he devi ce. For exampl e, a VAV box cont r ol l er i n a suspended cei l i ng i s i n mi ssi on space i f t he VAV box ser ves t hat r oom; an el ect r i cal swi t chgear i n an el ect r i cal r oom or an AHU i n a mechani cal r oom or on a r oof t op may st i l l be consi der ed t o be i n mi ssi on space i f t he or gani zat i on ( mi ssi on) ser ved by t hat swi t chgear or AHU cont r ol s access t o t he el ect r i cal r oom, mechani cal r oom or r oof t op. ] [ Mi ssi on space i s shown on t he dr awi ngs. ]

1. 4. 5 Net wor k

A net wor k i s a gr oup of t wo or mor e devi ces t hat can communi cat e usi ng a net wor k pr ot ocol . Net wor k pr ot ocol s must pr ovi de a met hod f or addr essi ng devi ces on t he net wor k; a communi cat i on met hod t hat does not pr ovi de an addr essi ng scheme i s not a net wor ked f or m of communi cat i on. Devi ces t hat communi cat e usi ng a met hod of communi cat i on t hat does not suppor t devi ce addr essi ng ar e not usi ng a net wor k.

1. 4. 6 Net wor k Connect ed

A component i s net wor k connect ed ( or " connect ed t o a net wor k" ) onl y when t he devi ce has a net wor k t r anscei ver whi ch i s di r ect l y connect ed t o t he net wor k and i mpl ement s t he net wor k pr ot ocol . A devi ce l acki ng a net wor k t r anscei ver ( and accompanyi ng pr ot ocol i mpl ement at i on) can never be consi der ed net wor k connect ed. Not e t hat ( unl i ke many I T def i ni t i ons of " Net wor k Connect ed" ) a devi ce connect ed t o a non- I P net wor k i s st i l l consi der ed net wor k connect ed ( an I P connect i on or I P addr ess i s not r equi r ed f or a devi ce t o be net wor k connect ed) .

1. 4. 6. 1 Wi r el ess Net wor k Connect ed

Any devi ce t hat suppor t s wi r el ess net wor k communi cat i on i s net wor k connect ed t o a wi r el ess net wor k, r egar dl ess of whet her t he devi ce i s communi cat i ng usi ng wi r el ess. Unl ess physi cal l y di sabl ed, devi ces wi t h

SECTI ON 25 05 11 Page 13 wi r el ess t r anscei ver s suppor t wi r el ess, i t i s not suf f i c i ent t o di sabl e t he wi r el ess i n sof t war e.

1. 4. 7 Net wor k Medi a

The t hi ng t hat pr ovi des t he communi cat i on channel bet ween t he devi ces on a net wor k. Typi cal l y wi r e, but mi ght i ncl ude wi r el ess, f i ber opt i c, or even power l i ne ( some net wor k pr ot ocol s al l ow sendi ng net wor k s i gnal s over power wi r i ng) .

1. 4. 8 User Account Suppor t Level s

The suppor t f or user account s i s cat egor i zed i n t hi s Sect i on as one of t hr ee l evel s:

1. 4. 8. 1 FULLY Suppor t ed

Devi ce suppor t s conf i gur abl e i ndi v i dual account s. Account s can be cr eat ed, del et ed, modi f i ed, et c. Pr i v i l eges can be assi gned t o account s.

These devi ces suppor t user - based ( as opposed t o r ol e- based) aut hent i cat i on.

1. 4. 8. 2 MI NI MALLY Suppor t ed

Devi ce suppor t s a smal l , f i xed number of account s ( per haps onl y one) .

Account s cannot be modi f i ed. A devi ce wi t h onl y a " User " and an " Admi ni st r at or " account woul d f i t t hi s cat egor y. Si mi l ar l y, a devi ce wi t h t wo PI Ns f or l ogon - one f or r est r i ct ed and one f or unr est r i ct ed r i ght s woul d f i t her e ( i n ot her wor ds, t he account s do not have t o be t he t r adi t i onal " user name and passwor d" st r uct ur e) . These devi ces t ypi cal l y onl y suppor t r ol e- based aut hent i cat i on.

Exampl es of devi ces whi ch MI NI MALLY suppor t account s ar e a) a var i abl e f r equency dr i ve wi t h a s i ngl e account whi ch r equi r es a PI N f or access t o conf i gur at i on; and b) a r oom l i ght i ng cont r ol t ouchpad i nt er f ace t hat has a s i ngl e account .

1. 4. 8. 3 NOT Suppor t ed

Devi ce does not suppor t any Access Enf or cement t her ef or e t he whol e concept of " account " i s meani ngl ess.

1. 4. 9 Manual Local I nput

Manual Local I nput s ar e syst em anal og or bi nar y i nput s t hat ar e adj ust abl e by a per son but ar e, by i nt r i nsi c har dwar e desi gn, ver y l i mi t ed i n pot ent i al capabi l i t i es. Manual Local I nput s do not have t ouch scr eens or f ul l keyboar ds, but may have a f ew but t ons or di al s t o al l ow i nput .

Manual Local I nput s do not have f ul l gr aphi c scr eens or dot - mat r i x di spl ays, but may have si mpl e l i ght s ( LEDs) or 7- segment di spl ays. Manual Local I nput s do not have any sor t of menu st r uct ur e, each but t on has a s i ngl e wel l - def i ned f unct i on.

Exampl es of Manual Local I nput s ar e H- O- A swi t ches, s i mpl e t her most at s, and di sconnect swi t ches.

1. 4. 10 Car d Reader

A car d r eader i s an i nput / out put devi ce whose pr i mar y f unct i on i s t o assi st i n t wo- f act or aut hent i cat i on. A car d r eader must have an i nt er f ace

SECTI ON 25 05 11 Page 14 t o r ead dat a f r om a car d and may be abl e t o wr i t e dat a t o a car d. A car d r eader may have a means ( such as but t ons, keypad, t ouchscr een, et c. ) f or a user t o i nput a PI N or passwor d, as wel l as a l i mi t ed di spl ay.

1. 4. 11 User I nt er f ace

A User I nt er f ace ( UI ) i s somet hi ng ot her t han a Manual Local I nput or Car d Reader t hat al l ows a per son t o i nt er act wi t h t he syst em or devi ce. Not e t hat whi l e a Car d Reader i s not by i t sel f a User I nt er f ace, a User I nt er f ace may cont ai n a Car d Reader i n or der f or i t t o aut hent i cat e i t s user . Wi t hi n cont r ol syst ems, t her e ar e a wi de r ange of User I nt er f aces.

Two i mpor t ant di st i nct i ons ar e 1) whet her t he user i nt er f ace i s Local or Remot e, and 2) t he ef f ect i ve capabi l i t i es of t he User I nt er f ace t o al t er dat a, whi ch i s t he " pr i v i l ege" of t he user i nt er f ace ( wher e ef f ect i ve pr i v i l ege avai l abl e t o a speci f i c user at a speci f i c user i nt er f ace i s t he combi nat i on of t he gr eat est pr i v i l ege of f er ed by t he user i nt er f ace and t he speci f i c account t he user i s l ogged i nt o) .

1. 4. 11. 1 Local User I nt er f ace

A Local User I nt er f ace i s a user i nt er f ace wher e t he physi cal har dwar e t he user i nt er act s wi t h ( keyboar d, but t ons, di spl ay, et c. ) i s physi cal l y par t of t he devi ce bei ng af f ect ed. Al l of t he r el evant char act er i st i cs of t he user i nt er f ace ar e embodi ed wi t hi n a s i ngl e devi ce.

Not e t hat a Local UI may be abl e t o access dat a i n a di f f er ent devi ce, Local ver sus Remot e i n t hi s cont ext r ef er s t o t he user i nt er f ace i t sel f ;

t he capabi l i t y t o access dat a i n a di f f er ent devi ce i s cover ed under " Ful l User I nt er f ace" .

1. 4. 11. 2 Remot e User I nt er f ace

A Remot e User I nt er f ace i mpl ement s a Cl i ent / Ser ver model wher e t he physi cal har dwar e t he user i nt er act s wi t h ( Cl i ent ) i s physi cal l y di st i nct f r om t he devi ce bei ng af f ect ed ( Ser ver ) . Most or al l of t he secur i t y and f unct i onal i t y char act er i st i cs of t he user i nt er f ace ar e def i ned by t he Ser ver , not t he Cl i ent . The Cl i ent and Ser ver communi cat e v i a a net wor k connect i on. A common exampl e of a r emot e user i nt er f ace i s a web- based i nt er f ace wher e t he br owser ( c l i ent ) i s gener al l y on di f f er ent har dwar e t han t he web ser ver ( ser ver ) . A Remot e UI r emai ns a Remot e UI even i f t he user happens t o be at a Cl i ent on t he same har dwar e as t he Ser ver . What i s i mpor t ant i s t hat a) t he Cl i ent may be on di f f er ent har dwar e t han t he Ser ver and b) t he maj or i t y of t he secur i t y and f unct i onal char act er i st i cs of t he i nt er f ace ar e def i ned at t he Ser ver .

Not e t hat t hi s def i ni t i on of " r emot e" i s consi st ent wi t h t hat gener al l y used i n t he cont r ol i ndust r y but i s not al i gned wi t h t he NI ST 800- 53 def i ni t i on of " Remot e" , whi ch r ef er s t o " out si de t he syst em" . The t er m " Remot e" her e bet t er al i gns wi t h t he NI ST 800- 53 def i ni t i on of " Net wor k" ( r emot e f r om wi t hi n t he syst em) Access.

1. 4. 11. 3 Types of User I nt er f ace ( by capabi l i t y)

User i nt er f aces ar e al so cat egor i zed by t hei r capabi l i t i es as bei ng Read Onl y, Li mi t ed, or Ful l .

SECTI ON 25 05 11 Page 15

1. 4. 11. 3. 1 Read- Onl y User I nt er f ace

A Read Onl y User I nt er f ace ( al so r ef er r ed t o as a Vi ew- Onl y User I nt er f ace) i s a user i nt er f ace t hat onl y al l ows f or r eadi ng dat a, i t does not al l ow ( have t he capabi l i t y t o) modi f y dat a. A Read Onl y User I nt er f ace may be ei t her Local or Remot e. A User I nt er f ace t hat i s conf i gur ed t o be Read Onl y ( by some ot her means t han t he i nt er f ace i t sel f , such as usi ng conf i gur at i on sof t war e on a l apt op) i s a Read- Onl y I nt er f ace. Not e a Read Onl y User I nt er f ace may have but t ons ( or t ouch scr een, et c. ) al l owi ng t he user t o navi gat e t hr ough t he pr esent at i on of dat a.

Exampl es of a Read Onl y User I nt er f aces ar e a) a publ i c l y v i ewabl e " ener gy dashboar d" showi ng weat her dat a and ener gy usage wi t hi n a bui l di ng and b) di gi t al wayf i ndi ng si gnage.

1. 4. 11. 3. 2 Li mi t ed User I nt er f ace

A Li mi t ed User I nt er f ace i s a user i nt er f ace t hat - by desi gn - can onl y al t er i nf or mat i on l ocal t o t he user i nt er f ace. Not e t hat t he det er mi nat i on of " al t er " i ncl udes onl y di r ect i nt er act i ons, i t expl i c i t l y excl udes i nt er act i ons t hat mi ght occur as secondar y ef f ect s. For exampl e, an i nt er f ace changi ng t he f l ow set poi nt i n a pump cont r ol l er i s a di r ect i nt er act i on, t he subsequent change i n f l ow ( as wel l as any subsequent downst r eam changes i n val ve posi t i on) ar e not di r ect i nt er act i ons.

Two exampl es of LI MI TED UI s ar e: a) a var i abl e speed dr i ve has a Li mi t ed Local User I nt er f ace whi ch al l ows t he user t o change pr oper t i es wi t hi n t he dr i ve, but does not al l ow af f ect i ng t hi ngs out si de t he dr i ve; and b) a t ypi cal home Wi Fi Rout er has a Li mi t ed Remot e User I nt er f ace whi ch al l ows conf i gur at i on of t he Rout er , but does not al l ow di r ect i nt er act i on wi t h ot her devi ces.

1. 4. 11. 3. 3 Ful l User I nt er f ace

A Ful l User I nt er f ace can al t er i nf or mat i on i n devi ces out si de t he devi ce wi t h t he user i nt er f ace. For exampl e, a t ypi cal Local Di spl ay Panel i s a Ful l Local User I nt er f ace whi l e a br owser - based f r ont end i s a Ful l Remot e User I nt er f ace.

1. 4. 11. 3. 4 Vi ew- Onl y User I nt er f ace

See Read- Onl y User I nt er f ace

1. 4. 11. 4 Ot her User I nt er f ace Ter mi nol ogy

I n addi t i on t o def i ni ng whet her a user i nt er f ace i s a Har dwar e Li mi t ed, Read- Onl y, Li mi t ed or Ful l , and whet her i t i s Local or Remot e, user i nt er f aces ar e c l assi f i ed by whet her t hey ar e wr i t abl e or pr i v i l eged.

1. 4. 11. 4. 1 Wr i t abl e User I nt er f ace

Any User I nt er f ace t hat i s not Read- Onl y i s Wr i t abl e. ( Li mi t ed User I nt er f aces and Ful l User I nt er f aces ar e bot h wr i t abl e user i nt er f aces ( as t hey ar e capabl e of changi ng a val ue) ) .

1. 4. 11. 4. 2 Pr i v i l eged User I nt er f ace

SECTI ON 25 05 11 Page 16

NOTE: Thi s subpar t uses t ai l or i ng opt i ons f or t he l et t er ed r equi r ement s. Af t er sel ect i ng t ai l or i ng opt i ons edi t t he l et t er s i n t hi s subpar t accor di ngl y.

A Pr i v i l eged UI i s a UI t hat has suf f i c i ent capabi l i t i es or f unct i onal i t y t hat i t r equi r es speci f i c cyber secur i t y measur es t o be put i n pl ace t o l i mi t i t s unaut hor i zed use. Ul t i mat el y, whet her a speci f i c user i nt er f ace i s consi der ed a Pr i v i l eged User I nt er f ace must be det er mi ned by usage.

Unl ess ot her wi se speci f i ed, user i nt er f aces can be det er mi ned t o be pr i v i l eged or not usi ng t he f ol l owi ng:

a. Read- Onl y User I nt er f aces ar e not pr i v i l eged user i nt er f aces.

b. User I nt er f aces t hat can i nhi bi t or f or ce t he act i vat i on of a f i r e suppr essi on syst em ( e. g. such as f or a pr e- act i on or del uge syst em) ar e al ways pr i v i l eged user i nt er f aces. Ot her Ful l User i nt er f aces f or Fi r e Al ar m Syst ems ar e pr i v i l eged user i nt er f aces as i ndi cat ed and shown, or when anot her r equi r ement of t hi s Sect i on est abl i shes t hey ar e pr i v i l eged. For al l ot her syst ems, Ful l User I nt er f aces ar e pr i v i l eged user i nt er f aces.

c. User i nt er f aces t hat al l ow f or conf i gur at i on of audi t i ng or al l ows f or modi f i cat i on or del et i on of audi t l ogs ar e pr i v i l eged user i nt er f ace.

d. User i nt er f aces t hat al l ow f or r epr ogr ammi ng a net wor k connect ed devi ce i s a pr i v i l eged user i nt er f ace.

e. Wr i t eabl e User I nt er f aces i n El ect r oni c Secur i t y Syst ems ( ESS) ar e pr i v i l eged user i nt er f aces.

e. Except as speci f i ed above, a Li mi t ed User I nt er f ace must be det er mi ned t o be pr i v i l eged or not based on t he speci f i c capabi l i t i es and use case of t he user i nt er f ace. I n gener al however , user i nt er f aces t hat do not of f er s i gni f i cant capabi l i t i es above and beyond t hose avai l abl e at t hat l ocat i on v i a ot her means ( e. g. such as a di sconnect swi t ch, br eaker , or hand- of f - aut o swi t ch, or physi cal at t ack) ar e not pr i v i l eged.

1. 4. 12 Wi r el ess Net wor k

Any net wor k t hat communi cat es wi t hout usi ng wi r es or f i ber opt i cs as t he communi cat i on medi a. Wi r el ess net wor ks i ncl ude: Wi Fi , Bl uet oot h, Zi gBee, cel l ul ar , sat el l i t e, 900 MHz r adi o, 2. 4 GHz, f r ee space opt i cal , poi nt - t o- poi nt l aser , and I R.

1. 4. 13 Wi r ed Br oadcast Net wor k

Wi r ed Br oadcast Net wor ks ar e any net wor k, such as power l i ne car r i er net wor ks and modem ( wi r ed t el ephony) , t hat use wi r e- based t echnol ogi es wher e t her e i s not a c l ear l y def i ned boundar y f or s i gnal pr opagat i on.

1. 5 ADMI NI STRATI VE REQUI REMENTS

1. 5. 1 Poi nt s of Cont act

NOTE: I ndi cat e t he appr opr i at e poi nt of cont act

SECTI ON 25 05 11 Page 17

( POC) f or each POC.

Gover nment Comput er Access Poi nt of Cont act : To pr ovi de cont r act or user access t o Gover nment comput er s. Speci f i cal l y, t hi s POC may be r equi r ed t o ar r ange f or el evat ed per mi ssi ons t o comput er s t o cr eat e a backup di sk i mage or i nst al l mal war e pr ot ect i on sof t war e.

HTTPS Cer t i f i cat e Poi nt of Cont act : To pr ovi de t he cont r act or wi t h web cer t i f i cat es.

Emai l Addr ess Poi nt of Cont act : The POC who wi l l pr ovi de t he cont r act or wi t h emai l addr esses f or t he I SSM and appl i cat i on admi ni st r at or f or audi t i ng.

Passwor d Poi nt of Cont act : The POC who wi l l ei t her coor di nat e t he sel ect i on of passwor ds wi t h t he cont r act or or who wi l l i ndi cat e i ndi v i dual s t o change t he passwor ds i n coor di nat i on wi t h t he cont r act or .

Mobi l e Code Poi nt of Cont act : The POC who wi l l pr ovi de access t o t he mobi l e code r eposi t or y. ( Thi s wi l l gener al l y be someone f r om t he i nst al l at i on I T or gani zat i on ( f or t he Ar my, t he NEC) . )

PKI I nf r ast r uct ur e Poi nt of Cont act : The POC who wi l l pr ovi de access t o t he PKI I nf r ast r uct ur e. I f PKI i s not r equi r ed by PART 3 of t hi s Sect i on, r emove t hi s br acket ed t ext . ( Thi s wi l l gener al l y be someone f r om t he i nst al l at i on I T or gani zat i on ( f or t he Ar my, t he NEC) . )

These poi nt s of cont act ar e used by name i n t he speci f i cat i on, and can be f ound by sear chi ng t he document f or t he POC ( usi ng under l i ned t ext ) .

Not al l pr oj ect s wi l l r equi r e al l POCs. I f unsur e of t he POC keep " The Cont r act i ng Of f i ce Repr esent at i ve ( COR) " and t he cont r act or wi l l r equest as needed.

Coor di nat e wi t h t he f ol l owi ng Poi nt s of Cont act as i ndi cat ed i n t hi s Sect i on and as r equi r ed. Not al l pr oj ect s wi l l r equi r e coor di nat i on wi t h al l Poi nt s of Cont act . When coor di nat i on i s r equi r ed and no Poi nt of Cont act i s i ndi cat ed, coor di nat e wi t h [ The Cont r act i ng Of f i ce Repr esent at i ve ( COR) ] [ _____] .

a. Gover nment Comput er Access Poi nt of Cont act : [ The Cont r act i ng Of f i ce Repr esent at i ve ( COR) ] [ _____]

b. HTTPS Cer t i f i cat e Poi nt of Cont act : [ The Cont r act i ng Of f i ce Repr esent at i ve ( COR) ] [ _____]

c. Emai l Addr ess Poi nt of Cont act : [ The Cont r act i ng Of f i ce Repr esent at i ve ( COR) ] [ _____]

SECTI ON 25 05 11 Page 18

d. Passwor d Poi nt of Cont act : [ The Cont r act i ng Of f i ce Repr esent at i ve

( COR) ] [ _____]

e. Mobi l e Code Poi nt of Cont act : [ The Cont r act i ng Of f i ce Repr esent at i ve

( COR) ] [ _____] [

f . PKI I nf r ast r uct ur e Poi nt of Cont act : [ The Cont r act i ng Of f i ce Repr esent at i ve ( COR) ] [ _____] ]

1. 5. 2 Coor di nat i on

NOTE: Thi s subpar t deal s wi t h cyber secur i t y r el at ed coor di nat i on r equi r ement s f or t he cont r act or , and does not i ndi cat e coor di nat i on t hat must be done by t he desi gner / speci f i er . I n addi t i on t o t he nor mal pr oj ect coor di nat i on, aut hor i zat i on f or wi r el ess use, al t er nat e account l ock per mi ssi ons and devi ces wi t h mul t i pl e I P connect i ons may be i mpact ed by s i t e ( or Ser vi ce) pol i c i es and need t o be coor di nat ed wi t h t he appr opr i at e Gover nment r epr esent at i ves bef or e aut hor i zat i on i s pr ovi ded.

Coor di nat e t he execut i on of t hi s Sect i on wi t h t he execut i on of al l ot her Sect i ons r el at ed t o cont r ol syst ems as i ndi cat ed i n t he par agr aph RELATED REQUI REMENTS. I t ems t hat must be consi der ed when coor di nat i ng pr oj ect ef f or t s i ncl ude but ar e not l i mi t ed t o:

a. I f r equest i ng per mi ssi on f or wi r el ess or wi r ed br oadcast communi cat i on, t he Wi r el ess and Wi r ed Br oadcast Communi cat i on Request submi t t al must be appr oved pr i or t o cont r ol syst em devi ce sel ect i on and i nst al l at i on.

b. I f r equest i ng per mi ssi on f or al t er nat e account l ock per mi ssi ons, t he Devi ce Account Lock Except i on Request must be appr oved pr i or t o cont r ol syst em devi ce sel ect i on and i nst al l at i on.

c. I f r equest i ng per mi ssi on f or t he use of a devi ce wi t h mul t i pl e physi cal connect i ons t o I P net wor ks, t he Mul t i pl e I P Connect i on Devi ce Request must be appr oved pr i or t o cont r ol syst em devi ce sel ect i on and i nst al l at i on.

d. Wi r el ess t est i ng may be r equi r ed as par t of t he cont r ol syst em t est i ng. See r equi r ement s f or t he Wi r el ess Communi cat i on Test Repor t submi t t al .

e. I f t he Devi ce Audi t Recor d Upl oad Sof t war e i s t o be i nst al l ed on a comput er not bei ng pr ovi ded as par t of t he cont r ol syst em, coor di nat i on i s r equi r ed t o i dent i f y t he comput er on whi ch t o i nst al l t he sof t war e.

f . The Cyber secur i t y I nt er connect i on Schedul e must be coor di nat ed wi t h ot her wor k t hat wi l l be i nt er connect ed t o, and i nt er connect i ons must be appr oved by t he Gover nment bef or e r el y i ng on t hem f or syst em f unct i onal i t y.

g. Cyber secur i t y t est i ng suppor t must be coor di nat ed acr oss cont r ol

SECTI ON 25 05 11 Page 19 syst ems and wi t h t he Gover nment cyber secur i t y t est i…