PWS Attachment 1A Fiber Requirements Specifications (FRS).pdf

FUNCTIONAL REQUIREMENTS SPECIFICATION

Fiber, Facilities and Transport Specifications

(FFTS) for Next Generation Optical

Transmission

FINAL VERSION

10 April 2019

Table of Contents

LIST OF FIGURES

LIST OF TABLES

1 FIBER INFRASTRUCTURE

1.1 Fiber Service Delivery Point (FSDP) and fiber Span

1.1.1 Definition of Fiber Service Delivery Point (FSDP)

1.1.2 Definition of Span

1.1.3 Definition of Segment

1.2 Fiber Optic Cable

1.2.1 General Requirements

1.2.2 Fiber Count

1.2.3 Fiber Performance

1.2.4 Outside Plant

1.2.5 Physical Path

1.2.6 Splicing and Miscellaneous Handling Requirements

1.2.7 Underground Installations

1.2.8 Aerial Installations

1.2.9 Underwater Installation

1.3 Facilities

1.3.1 General Requirements

1.3.2 Floor space

1.3.3 Power and HVAC

1.3.4 Geographic Location/ Environment

1.4 Network Management

1.4.1 Contractor Facility to Contractor NOC Data Feeds

1.4.2 Operations and Maintenance

1.5 Information Assurance and Physical Security

1.5.1 IA Implementation and Compliance

1.5.2 IA Goals and Guidance

1.5.3 Personnel Security

1.5.4 Facility Security

2 REFERENCES

3 ACRONYMS LIST

List of Figures

Figure 1.1 Depiction of FSDPs and spans (Notional) 8

Figure 1.2 Performance Criteria for a Representative Span 10

Figure 1.3 Diversity Requirements for the Notional Optical Mesh Network 13

List of Tables

Table 1-1 Response and Repair Time for Fiber Cut 18

INTRODUCTION

Defense Information System Agency (DISA) acquired specific dedicated fiber property assets globally to support transport requirements of Department of Defense (DoD) Information Network (DoDIN). This Fiber, Facilities and Fiber Specification (FFTS) defines the requirements for the Contractor to provide dark fiber and commercial facilities to support Department of Defense (DOD) users.

1 FIBER INFRASTRUCTURE

The DISN transport backbone is a physically diverse, secure high-speed transport network.

It is described more specifically as follows:

a. A meshed switched optical network across North America, Europe, and Pacific Theaters.

b. A network consisting of Dense Wave Division Multiplexing (DWDM) Reconfigurable Optical Add/Drop Multiplexers (ROADMs) and Optical Line Amplifiers (OLAs).

c. A meshed switched optical network, which provides for multiple service options at the optical layer including wavelength services.

This section describes the functional specifications required for the optical fiber cable and other transmission that may be used in the DISN. Specifically, this section states the requirements for:

a. Fiber Service Delivery Point (FSDP)

b. Fiber Optic Cable

c. Outside Plant

d. Facilities

e. Network Management

f. Information Assurance and Physical Security

1.1 Fiber Service Delivery Point (FSDP) and Fiber Span

1.1.1 Definition of Fiber Service Delivery Point (FSDP)

A Fiber Service Delivery Point (FSDP) is defined as a point where dark fiber terminates at a fiber patch panel which is collocated (i.e. within the same building) with an active DoDIN network element (e.g. OLA or ROADM). Thus, FSDPs can be physically located at both Government buildings and intermediate commercial facilities or “huts” [e.g. Controlled Environmental Vaults (CEVs) or Central Offices (COs)]. The FSDP for the fiber shall be a fiber optic patch panel with all fibers terminated (see Figure 1.1).

1.1.2 Definition of Span

A span is defined as a length of outside fiber optic cable (including connectors and/or splices) from one FSDP to an adjacent FSDP (see Figure 1.1) which does not contain any active network elements (e.g. OLAs or ROADMs) along the span.

1.1.3 Definition of Segment

A segment is defined as a length of outside fiber optic cable which originates at one Government Service Delivery Node (SDN) and terminates at another Government SDN. A segment is made up of one or more fiber spans (and thus contains two or more FSDPs).

Figure 1.1 Notional Fiber Segment and Span Depiction

1.2 Fiber Optic Cable

1.2.1 General Requirements

1.2.2 Fiber optic cable will be a mission critical, physical component of the DISN. The fiber shall be of high quality; robust and able to support a myriad of functions in order to meet the overall stringent performance requirements for the DISN. Hereafter, for the described fiber criteria, [R] denotes required and [D] denotes desired.

1.2.2.1 [R] The fiber shall meet the standards put forth in the following International Telecommunication Union Telecommunication Standardization Sector (ITU-T) G.652 (11/2009), G.654 (10/2012), G.655 (11/2009), and G.656 (07/2010) except where superseded by the following more specific requirements here within.

These detailed requirements will be outlined in the following sections.

1.2.2.2 [R] DSF, LS and MetroCore fiber types are not considered acceptable.

1.2.2.3 [D] For new installations, it is desired that the fiber comply with ITU-T G.654.C (10/2012) specifications.

1.2.3 Fiber Count

1.2.3.1 [R] Fiber Optic Cable strands (one pair) shall be provided between designated Government SDNs.

1.2.3.2 [R] If a new access fiber cable installation is to be fusion spliced to a commercial vendor backbone fiber, then the new fiber cable shall consist of 12 or 24 fiber strands (depending on the requirements for the specific installation) in a single duct.

1.2.3.3 [R] If an entire fiber span (SDP to SDP) is to be a new installation, then that fiber cable shall consist of 24, 48, 96, or 192 fiber strands (depending on the requirements for the specific installation).

1.2.3.4 [D] All new fiber installations shall also have an empty duct alongside the single duct to facilitate future growth.

1.2.3.5 [R] These new ducts shall be a minimum 50 mm in diameter.

1.2.4 Fiber Performance

1.2.4.1 [R] The fiber shall meet the following criteria listed below. These criteria are based on a single span of fiber (from FSDP to adjacent FSDP).

1.2.4.2 [R] The fiber span attenuation per kilometer due to all impairments shall be less than 0.23db/km at 1550nm at fiber end of life (EOL). Attenuation per kilometer will be calculated by dividing the total distance of the span by the total loss less 0.5db to account for the connector loss at each end.

1.2.4.3 [R] Regardless of fiber span length, the EOL total span attenuation shall be less than 1 dB from the initial/ Beginning of Life (BOL) value.

1.2.4.4 [R] For all currently installed fibers, the polarization mode dispersion (PMD) due to all impairments shall be less than or equal to 0.1 ps/km1/2 for any single fiber on the span when measured at 1550 nm.

1.2.4.5 [R] For all new installations, the polarization mode dispersion (PMD) due to all impairments shall be less than or equal to 0.05 ps/km1/2 for any single fiber on the span when measured at 1550 nm.

1.2.4.6 [R] The chromatic dispersion measured at 1550 nm shall be >= 2.0 ps/km nm.

1.2.4.7 [D] The chromatic dispersion measured at 1550 nm shall be >= 4.0 ps/km nm.

1.2.4.8 [R] Installation of all fiber shall comply with ITU-T G.652 (11/2009), ITU-T G.655 (11/2009), ITU-T K.25 (02/2000), ITU-T L.35 (10/1998), and Telcordia GR-20-CORE.

1.2.4.9 [R] Any single reflectance event shall be less than -40 dB.

1.2.4.10 [R] The connector reflectance at the FSDP shall be less than -50 dB.

1.2.4.11 [R] The connector insertion loss shall be less than 0.25 dB.

1.2.4.12 [R] The splice insertion loss shall be less than 0.2 dB.

1.2.4.13 [R] The connector shall tolerate a minimum of +33 dBm incident power.

1.2.4.14 [R] The fiber Optical Return Loss (ORL) shall be greater than 30 dB.

1.2.4.15 [R] For all currently installed fibers, the fiber age (i.e., from manufacture date) shall be less than 20 years old.

1.2.4.16 [R] The accumulated insertion losses within 20 km of any node shall be less than

1.0 dB.

1.2.4.17 [R]The insertion loss for a single event within 20 km of any node shall be less than 0.5dB.

1.2.4.18 [R] The reflection for a single event within 20 km of any node shall be less than -33.0 dB.

1.2.4.19 [R] The accumulated reflection within 20 km of any node shall be less than -27.0 dB.

1.2.5 Outside Plant

1.2.5.1 [R] All optical fiber, optical fiber cable bundles, and optical fiber ribbons shall adhere to the requirements as specified in Telcordia GR-20-CORE and or all relevant ITU standards.

1.2.5.2 [R] All fiber cables shall also meet the requirements of ANSI/ICEA S-87-640-1992, “Standard for Fiber Optic Outside Plant Communications Cable” and or all relevant ITU standards.

1.2.5.3 [R] The Contractor shall be responsible for all permits, easements, and rights of way, to include Host Nation agreements/approvals. All work shall be done in accordance with the requirements listed in the following sections unless superseded by the local Government regulations.

1.2.5.4 [R] The Contractor shall provide optical fiber infrastructure using underground installation procedures per Section 1.2.7.

1.2.5.5 [CR] If an underground installation is deemed cost prohibitive due to environmental constraints (e.g., rock, etc.), the Contractor shall provide optical fiber infrastructure using aerial installation procedures per Section 1.2.8 or underwater installation procedures per Section 1.2.9.

1.2.6 Physical Path

This physical fiber path can consist of a path that is (1) currently part of a carrier’s own fiber optic backbone network, (2) an access path, which extends from a carrier’s fiber backbone to an SDN, or (3) an access path, which extends between two SDNs without the need to use a carrier’s fiber backbone. Fiber optic cable shall be suitable for the environment in which it is installed and shall adhere to the requirements in the following sections unless superseded by the local Government regulations.

1.2.6.1 [R] Contractor is responsible to work with the Government to resolve any issues on the fiber path from Service Delivery Node (SDN) to SDN, to include contractor backbone, access paths and any Government Furnished Equipment (GFE) fiber routes to meet the specifications of this document.

1.2.6.2 [R] The fiber path between any two points shall be the most direct path feasible.

1.2.6.3 [R] As an option, the Contractor shall, at the Government’s request, provide fiber between the two SDNs at a particular site(s).

1.2.6.4 [R] No DISN fiber pair shall travel in the same physical path or through the same physical facilities as any other DISN fiber pair.

1.2.6.5 [R] All SDNs shall have at least two diverse access paths.

1.2.6.6 [R] If an SDN has 3 fiber pairs coming to/from it, all three access pairs must be diverse (see Figure 2).

1.2.6.7 [R] Where dark fiber is proposed for routes spanning a body of water, the Contractor shall utilize 2 separate tubes (within/on the structure) in order to satisfy physical diversity requirements.

1.2.6.8 [R] DISN fiber paths shall retain a minimum separation of 15 meters (50 Feet) from other DISN fiber paths.

1.2.6.9 [R] For any and all DISN fiber paths which cross over one another the Contractor shall provide a specific mitigation strategy on a case by case basis, if the Contractor cannot meet the diversity requirement in FRS paragraphs 1.2.5.8 (e.g. will maintain a vertical separation of a minimum of 15 meters (50 feet); will reinforce one path with concrete encasement, etc.)

1.2.6.10 [R] Defense Threat Reduction Agency Balanced Survivability Assessment, Critical Infrastructure Protection Plan] Fiber paths shall maintain a minimum of 6 ft. separation within the facilities.

1.2.6.11 [D] The fiber optic cable between the Government FSDPs shall be of the same type.

Figure 1 Diversity Requirements for the Notional Optical Mesh Network

1.2.7 Splicing and Miscellaneous Handling Requirements

1.2.7.1 [R] All splicing shall be performed using a fusion-splicing technique.

1.2.7.2 [R] Connectors shall only be present at equipment interface points at FSDPs.

1.2.8 Underground Installations

1.2.8.1 [R] Direct-buried fiber is not acceptable; a conduit/duct shall protect the fiber.

1.2.8.2 [R] A fiber shall be buried at a minimum depth of 42 inches or below the frost line whichever is deeper. For areas where the fiber is not buried at a minimum of 42 inches the Contractor shall provide an explanation as to the reason for this deviation and any risk mitigation approaches used (e.g. fiber is encased in steel conduit).

1.2.8.3 [R] During plowing or trenching of a facility, a warning tape shall be placed no less than 24 inches above the conduit and no less than 12 inches below grade.

1.2.8.4 [R] A buried fiber cable shall have a locating wire or conductive shield.

1.2.8.5 [R] For open trench and plowed construction, a warning tape shall be installed above the fiber pathway and permanently marked with a warning message advising that a fiber optic cable is below the tape.

1.2.8.6 [R] Surface warning markers shall be installed every 1300 ft., as well as at road crossings and culverts.

1.2.8.7 [R] For all fiber cable within a conduit, the cable may be without armor wrap, but shall be installed in conduit appropriate for the local conditions and necessary protection from electrical discharge and rodents.

1.2.9 Aerial Installations

Aerial fiber includes fiber along a bridge span. If aerial fiber is used, it shall adhere to the following requirements:

1.2.9.1 [R] Aerial fiber shall only be considered where buried conduit is neither available nor possible to construct.

1.2.9.2 [R] Aerial fiber shall be encased in conduit on a physically secure structure.

1.2.9.3 [R] Pole line fiber is acceptable only where no other means is available. This fiber cable shall be enclosed in a protective structure (i.e. one that minimizes impact of weather/environmental effects such as wind, rain, snow, ice, excessive sunlight, etc.)

for every aerial installation.

1.2.9.4 [R] Pole line fiber shall be, as a minimum, a dual armored cable.

1.2.9.5 [R] Pole line fiber shall be attached to a support wire or stranded messenger cable, double- lashed at minimum.

1.2.9.6 [R] The cable and all associated hardware shall meet local Government requirements for clearances over roads, driveways, freeways, rail lines, structures, waterways, or other areas. All installation practices shall include calculation of strand sag, down-guys, over-head guying, anchors, and related items.

1.2.10 Underwater Installation

1.2.10.1 [R] Underwater and Marine cabling shall conform to International, National, State and Local laws, regulations and standards.

1.2.10.2 [R] Underwater and marine cabling shall be armored and installed in such a manner and location (e.g. not a high threat area) to protect it against external aggression (e.g.

anchors, fishing equipment, hooks, grapnels, coral, rocks, sharks, etc.)

1.2.11 Fiber Characterization Test Requirements and Deliverables

1.2.11.1 [R] OTDR traces shall be conducted at 1550.

1.2.11.2 [R] Minimum 1 km launch reel shall be used or shall specify the launch reel distance used during testing.

1.2.11.3 [R] Unidirectional OTDR trace shall be conducted for each fiber on both sides for the first 40km with a 1000ns pulse width.

1.2.11.4 [R] Unidirectional OTDR traces shall be conducted for each fiber shot from each side with appropriate OTDR settings for the span distance.

1.2.11.5 [R] Bidirectional OTDR traces at 1550 report for each fiber for the full distance of the fiber span.

1.2.11.6 [R] CD Measurement shall be taken.

1.2.11.7 [R] PMD Measurement shall be taken.

1.2.11.8 [R] Bidirectional ORL shall be conducted at 1550.

1.2.11.9 [R] Bidirectional OPM measurement for loss shall be take in each direction and averaged loss.

1.2.11.10 [R] Acceptable file format and naming shall be used.

1.2.11.11 [R] Report shall identify the location and fiber identifier tested.

1.2.11.12 [R] OTDR files/reports shall be provided in both raw form and in .PDF format.

1.2.11.13 [R] Report shall include detailed fiber information to include fiber type, manufacturer, age, span length, aerial or buried and GIS data (ie; Google Earth KMZ) depicting the fiber routes.

1.2.11.14 [R] Report shall identify mixed fiber between spans; Report shall describe the make-up of the fibers in a span, fiber type and distance for each sub-subspan as shown in Figure 3. Format for report is attached as Appendix A – Link Fiber Details Form.

Figure 2 Mixed Fiber Between Network Elements

1.2.12 High Power Raman Requirements

1.2.12.1 For some applications the span length could be higher than 200km where higher power (1.5W or higher) Counter-Pump or Co-Pump in addition to Counter-Pump Raman amplifiers might be required for operation. In these situations amplifier might need to be spliced to outside fiber with more stringent loss requirements on the fiber for required Raman gain.

1.2.12.2 OTDR Trace Setup Requirements

• Minimum 1km launch cable is required.

• Measurements must be made from both ends of the link.

• Below is an example setup and may differ based on technology, Raman type, or other factors.

OTDR Test Setup

Wavelength Pulse Width

Span Range

Averaging Time

0 - 10km 1310 ns

≥ 20 km ≥ 1 min

Sampling and averaging shall be sufficient to detect discrete losses as small as 0.05 dB

0 - 10km 1550 ns

≥ 20 km ≥ 1 min

10 - 25km 1310 μsec

≥ 50 km ≥ 3 min

Sampling and averaging shall be sufficient to detect discrete losses as small as 0.1 dB

10 - 25km 1550 μsec

≥ 50 km ≥ 3 min

Figure 3 High-Powered Ramans – OTDR Test Setup

1.2.12.3 Fiber Pass or Fail Criteria

Individual Loss Event Criteria

Application RX Fiber

0 - 10km

RX

Fiber 10 -

25km

TX

Fiber

0 - 10km

TX

Fiber 10 -

25km

Counter Pump Only ≤ 0.1 dB

≤ 0.2 dB

N/A N/A

Co-Pump and Counter Pump ≤ 0.1 dB

≤ 0.2 dB

≤ 0.1 dB

≤ 0.2 dB

Figure 4 High-Powered Ramans – Fiber Pass or Fail Criteria

1.3 Facilities

The following requirements pertain to all Contractor facilities (e.g., CEVs, COs, etc.), which include categories such as floor space, power, HVAC, environmental, and location concerns.

1.3.1 General Requirements

1.3.1.1 [R] The Contractor shall provide secure shelters, spaces, or enclosures to house OLA and ROADM equipment along the fiber pathways between the sites.

1.3.1.2 [R] The Contractor shall ensure their facilities (e.g. huts), provide adequate power, grounding, HVAC, back-up power, etc. to support new OLA and ROADM equipment.

1.3.2 Floor Space

1.3.2.1 [R] The Contractor shall ensure the reserved floor space can accommodate the following maximum dimensions for each rack: 27 in (w) x 84 in (h) x 32 in (d).

1.3.2.2 [R] The Contractor shall reserve floor space to accommodate a minimum of 2 racks for OLAs.

1.3.2.3 [R] The Contractor shall reserve floor space to accommodate a minimum of 6 racks for ROADM/ OTN Switch.

1.3.3 Power and HVAC

1.3.3.1 [R] The Contractor shall provide DC power to the OLA DISA Equipment, at a minimum the Contractor shall provide two 50 Amp DC power feeds. Each DC power feed shall be from physically diverse DC power sources designated as A and B. The Contractor shall ensure the two DC feeds are ready and available for each OLA equipment at the designated rack.

1.3.3.2 [R] The Contractor shall provide DC power to the ROADM/OTN Switch DISA Equipment, at a minimum the Contractor shall provide eight 60 Amp DC power feeds for each ROADM/OTN Switch. The DC power feed shall be from physically diverse DC power sources designated as A and B. Four DC feeds from power source A, and four DC feeds from power source B. The Contractor shall ensure the eight DC feeds are ready and available for each ROADM/OTN Switch equipment at the designated rack.

1.3.3.3 [R] The Contractor shall provide uninterruptible power to all DISA equipment.

This includes a facility Uninterruptible Power Supply system and backup generator(s).

1.3.3.4 [R] The Contractor shall ensure that their facilities shall supply DISN equipment with a power availability of .99999 per site.

1.3.3.5 [D] The Contractor shall ensure that their facilities shall supply DISN equipment with a power availability of .999999 per site.

1.3.3.6 [R] The Contractor shall provide sufficient HVAC capacity within their facilities (e.g.

huts) to accommodate equipment, which may dissipate up to 2.5 kilowatts of power per rack.

1.3.4 Geographic Location/ Environment

1.3.4.1 [R] The Contractor shall provide the GPS coordinates and street address location of all intermediate equipment facilities (e.g. huts).

1.3.4.2 [R] The Contractor shall provide the as-built path and GPS coordinates for every 50 m of fiber path.

1.3.4.3 [R] The spaces or enclosures furnished may be existing or new, and may be used jointly by the Government, the Contractor, and others. See Section 1.5.4 Facility Security for further requirements.

1.3.4.4 [R] If installed in an outdoor enclosure, the enclosure shall be hardened to protect against access and vandalism. If installed in an area adjacent to right-of-way for vehicular traffic (such as roadways, freeways, waterways, or rail lines), the enclosure shall meet the safety standards of the authority having jurisdiction over the right-of-way.

1.3.4.5 [R] If an outdoor enclosure is used, the equipment installed shall be designed and certified for use in this application, with ratings for temperature and humidity changes for the area in question, plus a safety margin of not less than +/- 10% of maximums or minimums historically encountered.

1.4 Network Management

1.4.1 Contractor Facility to Contractor NOC Data Feeds

1.4.1.1 [R] The Contractor shall provide an electronic data feed that provides forwarding of near real time facility and environmental alarms to include, but not limited to, power/temperature (if available) conditions, and intrusion detection information.

1.4.1.2 [R] The information provided by the data feed shall be derived from inputs obtained from Contractor’s facilities, e.g. huts and other common carrier facilities.

1.4.1.3 [R] Data feeds shall be consolidated at the fiber Contractor’s NOC.

1.4.1.4 [R] The fiber Contractor shall notify within 10 minutes, by telephone, the Government

Network Support Center when a facility alarm occurs within an OLA housing government equipment

1.4.2 Operations and Maintenance

1.4.2.1 [R] When a terrestrial or ocean/submarine fiber optic cable cut occurs, the following response and repair times in Table 1-1 shall be met.

Theaters Response Time (on site) Repair i *

CONUS 2 hours 8 hours

Pacific 2 hours 8 hours

Europe 2 hours 8 hours

Submarine 2 hours notification 20 days

Table 1-1 Response and Repair Time for Fiber Cut

* Indicates maximum repair time. Repair time starts once personnel arrive on-site.

1.5 Information Assurance and Physical Security

This section presents the functional requirements for Information Assurance (IA) within the fiber plant and for the commercial facilities that house Government equipment and/or fiber.

Information Assurance requirements are required to be identified and included in the design, acquisition, installation, operation, upgrade, or replacement of all information technology (IT) dependent systems.

1.5.1 IA Implementation and Compliance

The goal of Information Assurance is not finite; it is a continual process to mitigate the risks associated with all devices and subsystems of the DISN, with minimal to no impact on the functionality and performance of the system and services provided.

DISA recognizes that Government IA requirements are more stringent than those observed in the commercial sector.

1.5.1.1 [R] In cases where an IA feature is not currently available, Contractors shall present their plan to meet the particular requirement.

1.5.1.2 [R]The plan shall be presented and approved prior to the formal security test and evaluation phase of the system certification and accreditation. When, a requirement is unable to be fulfilled, alternate measures to mitigate risk to the component shall be provided.

1.5.2 IA Goals and Guidance

In accordance with DoD’s Cybersecurity Policy specified in DoDI 8500.01, DoD will implement a multi-tiered cybersecurity risk management process to protect U.S.

interests, DoD operational capabilities, and DoD individuals, organizations, and assets from the DoD Information Enterprise level, through the DoD Component level, down to the IS level as described in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-39 and Committee on National Security Systems (CNSS) Policy (CNSSP) 22. DoDI 8500.1 directs the satisfaction of controls specified in NIST SP 800-53. The applicable controls are those listed in the Physical and Environmental Protection and the Personnel Security sections. Those controls are summarized below.

1.5.3 Personnel Security

Develops, documents, and disseminates:

a. A personnel security policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and

b. b. Procedures to facilitate the implementation of the personnel security policy and associated personnel security controls; and

Reviews and updates the current:

i. Personnel security policy; and

ii. Personnel security procedures.

1.5.3.1 Position Risk Designation

a. Assigns a risk designation to all organizational positions;

b. Establishes screening criteria for individuals filling those positions; and

c. Reviews and updates position risk designations

1.5.3.2 Personnel Screening

a. Screens individuals prior to authorizing access to the information system; and

b. Rescreens individuals

1.5.3.3 PS-4 Personnel Termination

Upon termination of individual employment:

a. Disables information system access;

b. Terminates/revokes any authenticators/credentials associated with the individual;

c. Conducts exit interviews that include a security debrief;

d. Retrieves all security-related organizational information system-related property;

e. Retains access to organizational information and information systems formerly controlled by terminated individual; and

f. Notifies all personnel with security responsibilities.

1.5.3.4 Personnel Transfer

a. Reviews and confirms ongoing operational need for current logical and physical access authorizations to information systems/facilities when individuals are reassigned or transferred to other positions within the organization;

b. Initiates personnel replacement as necessary;

c. Modifies access authorization as needed to correspond with any changes in operational need due to reassignment or transfer; and

d. Notifies government of the change.

1.5.3.5 Access Agreements

a. Develops and documents access agreements for organizational information systems;

b. Reviews and updates the access agreements; and

c. Ensures that individuals requiring access to organizational information and information systems:

i. Sign appropriate access agreements prior to being granted access;

and

ii. Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated.

1.5.3.6 Third-Party Personnel Security

a. Establishes personnel security requirements including security roles and responsibilities for third-party providers;

b. Requires third-party providers to comply with personnel security policies and procedures established by the organization;

c. Documents personnel security requirements;

d. Requires third-party providers to notify of any personnel transfers or terminations of third-party personnel who possess organizational credentials and/or badges, or who have information system privileges and

e. Monitors provider compliance.

1.5.3.7 Personnel Sanctions

The organization:

a. Employs a formal sanctions process for individuals failing to comply with established information security policies and procedures; and

b. Notifies organization security personnel when a formal employee sanctions process is initiated, identifying the individual sanctioned and the reason for the sanction.

1.5.4 Facility Security

The requirements listed below shall apply to all types of Contractor facilities that house Government equipment or fiber. If the following requirements violate local government ordinance, local ordinance prevails.

1.5.4.1 Develops, documents, and disseminates:

a. A physical and environmental protection policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and

b. Procedures to facilitate the implementation of the physical and environmental protection policy and associated physical and environmental protection controls.

1.5.4.2 Develops, approves, and maintains:

a. a list of individuals with authorized access to the facility where the information system resides;

b. Issues authorization credentials for facility access;

c. Reviews the access list detailing authorized facility access; and

d. Removes individuals from the facility access list when access is no longer required.

1.5.4.3 Enforces physical access authorizations at facilities housing government equipment or fiber by;

a. Verifying individual access authorizations before granting access to the facility;

and

b. Controlling ingress/egress to the facility;

c. Maintains physical access audit logs;

d. Provide safeguards to control access to areas containing government equipment within a publicly accessible facility;

e. Escorts visitors and monitors visitor activity];

f. Secures keys, combinations, and other physical access devices;

g. Inventories facilities containing government equipment; and

h. Changes combinations and keys on a scheduled basis and/or when keys are lost, combinations are compromised, or individuals are transferred or terminated.

1.5.4.4 The organization controls physical access to information system distribution and transmission lines within organizational facilities.

1.5.4.5 The organization controls physical access to information system output devices to prevent unauthorized individuals from obtaining the output.

1.5.4.6 Monitors physical access to the facility where the information system resides to detect and respond to physical security incidents;

a. Reviews physical access logs on a regular basis and upon occurrence of a security event; and

b. Coordinates results of reviews and investigations with the organizational incident response capability.

1.5.4.7 Maintains and reviews visitor access records to the facility where the information system resides.

1.5.4.8 Power Equipment and Cabling

The organization protects power equipment and power cabling for the information system from damage and destruction.

1.5.4.9 Emergency Shutoff

The organization:

a. Provides the capability of shutting off power to the information system or individual system components in emergency situations;

b. Places emergency shutoff switches or devices to facilitate safe and easy access for personnel; and

c. Protects emergency power shutoff capability from unauthorized activation.

1.5.4.10 Emergency Power

The organization provides a short-term uninterruptible power supply in the event of a primary power source loss.

1.5.4.11 Emergency Lighting

The organization employs and maintains automatic emergency lighting for the information system that activates in the event of a power outage or disruption and that covers emergency exits and evacuation routes within the facility.

1.5.4.12 Fire Protection

The organization employs and maintains fire suppression and detection devices/systems for the information system that are supported.

1.5.4.13 Temperature and Humidity Controls

The organization:

a. Maintains temperature and humidity levels within the facility where the information system resides at.

1.5.4.14 PE-15 Water Damage Protection

The organization protects the information system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible, working properly, and known to key personnel.

1.5.4.15 Delivery and Removal

The organization authorizes, monitors, and controls equipment entering and exiting the facility and maintains records of those items.

1.5.4.16 Alternate Work Site

The organization:

a. Employs the same security procedures at alternate work sites;

b. Assesses as feasible, the effectiveness of security controls at alternate work sites; and

c. Provides a means for employees to communicate with information security personnel in case of security incidents or problems.

1.5.4.17 Location of Information System Components

The organization positions information system components within the facility to minimize potential damage from physical and environmental hazards and to minimize the opportunity for unauthorized access.

1.5.4.18 Information Leakage

The organization protects the information system from information leakage due to electromagnetic signals emanations.

1.5.4.19 Asset Monitoring and Tracking

The organization:

a. Tracks and monitors the location and movement of assets within controlled areas; and

b. Ensures that asset location technologies are employed in accordance with applicable federal laws, Executive Orders, directives, regulations, policies, standards, and guidance.

2 REFERENCES

1. ANSI T1.104-1991 (R1997), Exchange-Interexchange Carrier Interfaces-Individual Channel Signaling Protocols, 1997.

2. ANSI/ICEA S-87-640-1992, Standard for Fiber Optic Outside Plant Communications Cable, 1992.

3. CJCSI 6510.01C, Chairman of the Joint Chiefs of Staff Instruction, Information Assurance and Computer Network Defense, (May 2001)

4. DCID 6/3, Director of Central Intelligence Directive 6/3, Protecting Sensitive Compartmented Information within Information Systems, (1999)

5. Defense Intelligence Agency, Defense Intelligence Agency Manual (DIAM)-50-3, Physical Security Standards for Construction of Sensitive Compartmented Information Facilities

6. Department of Defense Directive 8530.2, Computer Networking Defense (CND)

7. Department of Defense Directive (DoDD) 8500.1E, Information Assurance (IA), 23 April 2007.

8. Department of Defense PKI Guidance and Policy Memorandum (August 2000)

9. Department of Defense Security Technical Implementation Guides (STIG)

10. DISAI 630-230-19, Automated Data Processing Information Systems Security Program, 9 July 1996

11. DoD 5200.1-R, "DoD Information Security Program Regulation," January 14, 1997.

12. DoD Directive C- 3222.5, "Electromagnetic Compatibility (EMC) Management Program for SIGINT Sites (U)," April 22, 1987

13. DoD Public Key Infrastructure (PKI) Guidance and Policy Memorandum (12 August 2000)

14. DoD Directive 8500.1, Department of Defense Directive, Subject: Information Assurance, (October 2002)

15. DoD Instruction 8500.2, Department of Defense Instruction and Attachments 1-6 to Enclosure 4, Subject: Information Assurance Implementation, (6 February 2003)

16. DoD Directive O- 8530.1, Department of Defense Directive, Subject: Computer Networking Defense (CND), (8 January 2001)

17. DoDI 5200.40, “DoD Information Technology Security Certification and Accreditation Process (DITSCAP),” 7 October 1999

18. EIA/RS-310D, Cabinets, Racks, Panels, and Associated Equipment, Revision E, 1996

19. ISO/IEC 13239:2002, High-level data link control (HDLC) procedures

20. ITU-T G.652 (11/2009) Recommendation: Characteristics of a single mode optical fiber cable, November 2009.

21. ITU-T G.654 (10/2012) Recommendation: Characteristics of a cut-off shifted single-mode fibre and cable, October, 2012.

22. ITU-T G.655 (11/2009) Recommendation: Characteristics of a non-zero dispersion-shifted single mode optical fiber cable, November 2009.

23. ITU-T G.656 (07/2010) Recommendation: Characteristics of a fibre and cable with non- zero dispersion for wideband optical transport, July 2010.

24. ITU-T M 3010 – Principles for a Telecommunication Management Network, February 2000.

25. ITU-T M.24otn Error Performance Objectives and Procedures for Bringing-into- Service and Maintenance of Optical Transport Networks, December 2003.

26. ITU-T M.3100 – Generic Network Model, April 2005

27. ITU-T M.3400 TMN – Management Functions, February 2000.

28. ITU-T X.722 – Open Systems Interconnection – Structure of Management Information: Definition of Management Information, 17 January 1992

29. ITU-T X.733 – Open Systems Interconnect – System Management: Alarm Reporting

30. JROCM 134-01, Capstone Requirements Document (CRD), Global Information Grid (GIG), (August 2001)

31. MIL-STD-188-125-1, High-Altitude EMP Protection for Fixed Ground-Based Facilities, 2005.

32. National Security Telecommunications and Information Systems Security Policy (NSTISSP) No. 11, “National Policy Governing the Acquisition of Information Assurance (IA) and IA- enabled Information Technology Products,” January 2000

33. Non-Classified (But Sensitive) Internet Protocol Router Network (NIPRNet) Security Technical Implementation Guide, Version 1, Release 1 (February 2002)

34. NSTISSI 7003, Section IV, Paragraph 5 and Paragraph 4, a,1,b

35. NSTISSI No. 4009, National Security Telecommunications and Information Systems Security Instruction, “National Information Systems Security Glossary”, (September 2000)

36. Office of Management and Budget (OMB) Circular A-130, Transmittal Memorandum #4, Management of Federal Information Resources, dated 11/28/2000.

37. Telcordia GR-815-CORE, Generic Requirements for Network Element/ Network System (NE/NS) Security, Issue 2, March 2002

38. Telcordia GR-199 – Operations Application Messages – TL1 Memory Administration Messages, Issue 6, December 2005

39. Telcordia GR-20-CORE, (Bellcore) Qualification: Generic Requirements for Optical Fiber and Optical Fiber Cable, Issue 3, May 2008.

40. Telcordia GR-2998, Generic Requirements for Wave Division Multiplexing (WDM) Element Management Systems (EMSs), Issue 2, Jan 2000.

41. Telcordia GR-499, Transport Systems Generic Requirements (TSGR):

Common Requirements, Issue 4, November 2009.

42. Telcordia GR-820, Generic Digital Transmission Surveillance, Issue 2, December

43. Telcordia GR-833 – TL1 Surveillance and Maintenance Messages, Issue 7, Dec

44. Telcordia GR-63 NEBS Requirements: Physical Protection, Issue 4, April 2012

45. The DISN Mission Need Statement (MNS), JROCM 047-95, (March 1995)

46. TMF 513 – Multi-Technology Network Management Business Agreement , Release 3.5

47. TMF 814 – Multi-Technology Network Management IDL Solution Set , Release 3.5

48. TMF-608 – Multi-Technology Network Management Information Agreement , Release 3.5

49. 10 U.S.C. 2224 – Defense Information Assurance Program, 2010

3 ACRONYMS LIST

ANSI American National Standards Institute

CDC Central Data Center

CEV Controlled Environmental Vault

CIAO Critical Infrastructure Assurance Office

CIO Chief Information Officer

CIP Critical Infrastructure Program

CMS Configuration Management System

CO Central Office

CONUS Continental United States

COOP Contingency of Operations Plan

CoS Class of Service

COTS Commercial Off-The-Shelf

D Desired

DEW Directed Energy Weapons

DIAM Defense Intelligence Agency Manual

D iffserv Differentiated Services; also Diff-Serv

DISA Defense Information Systems Agency

DISN Defense Information Systems Network

DM Degraded minutes

DoD Department of Defense

DWDM Dense Wave Division Multiplexing EAI Electronic Alarm Interface

EBGP External Border Gateway Protocol

EDI Electronic Data Interchange

EGP Exterior Gateway Protocol

E-LSP EXP-inferred-Per Scheduling Class LSP

EM Electromagnetic

EMI Electromagnetic Interference

EMP Electromagnetic Pulse

EMS Element Management Systems

EOL End Of Life

ESCON Enterprise System Connection

ESF Extended Superframe

F Future

FRS Functional Requirements Specification

FSDP Fiber Service Delivery Point

Gb/s Gigabit per Second

GbE Gigabit Ethernet

Gbps Gigabits Per Second

GFE Government-Furnished Equipment

Ghz Gigahertz (thousands of Mhz)

HEMP High-Altitude Electromagnetic Pulse

HVAC Heating, Ventilation, & Air Conditioning

IA Information Assurance

IAW In Accordance With

IBGP Internal Border Gateway Protocol

IC Intelligence Community

ID Identification

IGP Interior Gateway Protocol

INMS Integrated Network Management System

Intserv Integrated Services; also Int-Serv

IP Internet Protocol

IPSec Internet Protocol Security

ISO International Organization for Standardization

IT Information Technology

ITU-T International Telecommunication Union-Telecommunication

IW/IO Information Warfare, Information Operations

JDCS Joint DISN Control System

JDIICS Joint Defense Information Infrastructure Control System

MIB Management Information Base

MTTR Maintenance time to Repair

NE Network Element

NEC National Electrical Code

Nm Nanometer

NMCN Network Management and Control Network

NMI Network Management Interface

NNI Network to Network Interface

NOC Network Operations Center

NSAP Network Service Access Point

O&M Operations & Maintenance

OCONUS Outside the Continental United States

OEO Optical-Electrical-Optical

OIF Optical Internetworking Forum

OLA Optical Line Amplifier

OMB Office of Management and Budget

ORL Optical Return Loss

OSS Operational Support System

OTDR Optical Time Domain Reflector

PM Performance Management

PMD Polarization Mode Dispersion

PMS Performance Management System

POP Point of Presence

PRM Performance Report Message

Ps Picosecond

QoS Quality of Service

R Required

RF Radio Frequency

RMS Report Management System

RNOSC Regional Network Operations and Security Center

ROADM Reconfigurable Optical Add/Drop Multiplexer

SCIF Sensitive Compartmented Information Facility

SDN Service Delivery Node

SDP Service Delivery Point

SNMP Simple Network Management Protocol

SOP State of Polarization

SOW Statement Of Work

TBD To Be Determined

TCP Transmission Control Protocol

TL1 Transaction Language 1

TLV Type, Length, Value tuple

TMI Trouble Management Interface

TMN Telecommunications Management Network

TMS Trouble Management System

UDP User Datagram Protocol

UNI User Network Interface

UPS Uninterruptible Power Supply

VPN Virtual Private Network