Attachment_B_-_Physical_Security_DISA_Ins_240-110-33.pdf

Enclosure 2: DISAI 240-110-33

PHYSICAL PROTECTION OF CLASSIFIED INFORMATION

1. General. Classified information shall be secured under conditions adequate to prevent access by unauthorized persons.

Weapons or sensitive items such as funds, jewels, precious metals, or drugs shall not be stored in the same container used to safeguard classified information. The requirements specified as follows represent acceptable security standards.

2. Standards for Storage Equipment. The General Services Administration (GSA) establishes and publishes minimum standards, specifications, and supply schedules for containers, vault doors, modular vaults, alarm systems, and associated security devices suitable for the storage and protection of classified information. DoD Directive 3224.3, Physical Security Equipment (PSE): Assignment of Responsibility for Research, Development, Testing, Evaluation, Production, Procurement, Deployment, and Support, describes acquisition requirements for physical security equipment used within DoD.

2.1 External Markings. There shall be no external markings

revealing the level of classified information authorized to be or actually stored in a given container, vault, or secure area, nor shall the priority given to the container for emergency evacuation or destruction be placed on the exterior of the container. This does not preclude placing a mark or symbol (e.g., a bar code) on the container for other purposes (e.g., identification and/or inventory purposes) nor from applying decals or stickers required by the Director of Central Intelligence for containers used to store intelligence information.

2.2 Combinations.

2.2.1 Protection. The combination of a container, vault, or secure area where classified information is stored shall be treated as, and protected at, the highest level of the classified information stored therein.

2.2.2 Changes. Combinations to security containers, vaults, and secure areas shall be changed only by individuals having that responsibility and an appropriate security clearance.

Combinations shall be changed as follows:

Attachment B

2.2.2.1 When placed in use.

2.2.2.2 When an individual knowing the combination no longer

requires access.

2.2.2.3 When the combination has been subject to possible

compromise.

2.2.2.4 When taken out of service. (Built in combination locks shall be reset to the standard combination of 50-25-50 and combination padlocks shall be reset to the standard 10-20-30.)

2.2.2.5 When containing North Atlantic Treaty Organization

(NATO) classified information. (Combinations will be changed at least once every year.)

2.3 Records. Each component Security Manager shall maintain

a record for each vault and secure area door or container used for storage of classified information. This record will show the location of the container or door and the names, home addresses, and home telephone numbers of the individuals having knowledge of the combination and/or classified information contained therein.

3. Locks. New purchases of combination locks for GSA approved security containers, vault doors, and secure areas shall conform to Federal Specification FF-L-2740A, Federal Specification Locks, Combination.

4. Procurement of New Security Storage Equipment. New security storage equipment shall be procured from those items listed on the GSA Federal Supply Schedule. Requests for exceptions will be made to the DISA Security Office (MPS6) with final approval made by the Director, DISA.

5. Repair of Damaged Security Containers. Neutralization of lock outs (a situation where the container is locked and will not open when the combination is presented) or repair of any damage that affects the integrity of a security container approved for storage of classified information shall be accomplished only by authorized persons who have been the subject of a trustworthiness determination in accordance with DoD 5200.2-R, Personnel Security, or are continuously escorted.

5.1 Only GSA approved security containers repaired in

accordance with Federal Standard 809A, Neutralization and Repair of GSA Approved Containers, that have been inspected and approved by a GSA authorized inspector, will be authorized for storage of classified information.

5.2 Unapproved modification or repair of containers and vault doors is considered a violation of the container’s or door’s integrity and the GSA label shall be removed. Thereafter, the container and vault may not be used to protect classified information except after inspection and approval from a GSA authorized inspector.

6. Acoustic Security. Acoustic security is composed of those security measures designed and used to deny aural access to classified information. Most of these security measures are physical in nature.

6.1 When dealing with acoustics, a rating used in architectural considerations of sound transmission loss such as those involving walls, ceilings, doors, or floors is the sound transmission class (STC).

6.2 There are two STC ratings used for reference when dealing with acoustic security, STC 45 and STC 50. STC 45 is when loud speech can be heard, but is unintelligible and normal speech cannot be heard. STC 50 is when very loud sounds, such as loud singing, brass musical instruments, or a radio at full volume, can be heard faintly or not at all.

7. Storage.

7.1 Classified Information. Classified information that is not under the personal control and observation of an authorized person is to be guarded or stored in a locked security container, vault, room, or area.

7.1.1 Top Secret. Top Secret information shall be stored by

one of the following methods:

7.1.1.1 Closed Storage. Information shall be stored in a GSA

approved security container equipped with a combination lock meeting FF-L-2740A standards and will have one of the following supplementary controls: (1) the location that houses the security container shall be subject to continuous protection by cleared guard or duty personnel, (2) cleared guard or duty personnel shall inspect the security container once every

2 hours, or (3) an intrusion detection system (IDS) meeting the requirements of paragraph 9, and personnel responding within 15 minutes of the alarm annunciation.

7.1.1.2 Open Storage. In a modular vault, vault, or a secure

area constructed in accordance with paragraph 8 and equipped with an IDS meeting the requirements of paragraph 9 with the personnel responding to the alarm within 15 minutes of the alarm annunciation if the area is covered by security in-depth or a 5-minute alarm response if it is not.

7.1.2 Secret. Secret information shall be stored by one of the following methods:

7.1.2.1 Open Storage. In the same manner as prescribed for

Top Secret information.

7.1.2.2 Closed Storage. In a GSA approved security container

equipped with a combination lock meeting FF-L-2740A without supplemental controls.

7.1.3 Confidential. Confidential information shall be stored

in the same manner as prescribed for Top Secret or Secret information except that supplemental controls are not required.

7.2 Field Conditions. Under field conditions during military

operations, the commander may prescribe the measures deemed adequate to meet the storage standards as outlined in subparagraphs 7.1.1 through 7.1.3.

7.3 Bulky Material. Storage areas for bulky material

containing Secret or Confidential information may have access openings secured by GSA approved changeable combination padlocks (Federal Specification FF-L-P-110 series) or high security key operated padlocks (Military Specification MIL-P-43607). Other security measures as outlined in subparagraphs 7.1.1 through

7.1.3 are required.

8. Construction of Open Storage Areas.

8.1 Walls.

8.1.1 Requirements. Walls must be of permanent construction

materials (i.e., plaster, gypsum wallboard, metal panels, hardboard, wood, plywood, or other materials) offering resistance to, and showing evidence of, unauthorized entry into the area. Walls shall be extended to the true ceiling and attached with permanent construction materials.

8.1.2 Acoustic Security. For areas where classified will

be discussed on a regular or recurring basis, walls shall be constructed to provide a minimum STC 45 rating. Unless the area concerned is a classified video teleconference (VTC) room or the area has a STU-III/STE with a speakerphone, the walls must be constructed to provide a minimum of STC 50.

If construction that meets these requirements is impractical, a sound masking system approved by MPS6 will be utilized.

8.2 Doors.

8.2.1 Requirements.

8.2.1.1 All doors (access and emergency exit) shall meet one of the following construction criteria:

8.2.1.1.1 Solid wood core door, a minimum of 1 ¾ inches thick.

8.2.1.1.2 Sixteen gauge metal cladding over wood or composition materials, a minimum of 1 ¾ inches thick. The metal cladding shall be continuous over the entire front and back surface of the door.

8.2.1.1.3 Metal fire or acoustical protection doors, a minimum of 1 ¾ inches thick.

8.2.1.2 If the hinge pins of any perimeter door are located on the exterior side, they shall be peened, brazed, or spot-welded to prevent removal.

8.2.2 Acoustic Security. For areas where classified will be

discussed on a regular or recurring basis, all doors shall be equipped with a door sweep and rubber gaskets covering the gap between the door and doorframe. The gaskets and door sweep will be attached to the interior side of the door. If the door is a double door, an astragal strip, a narrow strip of material applied over the gap between a pair of doors for protection from unauthorized entry and sound attenuation, shall be attached to the inside of one of the doors covering the center gap between the doors. The doors shall meet the same STC rating as specified in subparagraph 8.1.2.

8.2.3 Access Door. The number of access doors shall be kept to one. The door shall be of solid core construction. The access door shall be equipped with a built-in GSA-approved combination lock meeting Federal Specification FF-L-2740. The door shall be equipped with a heavy-duty automatic door closer. The door shall not have any keyway installed to allow for key access or operation.

8.2.4 Emergency Exit Doors. All other doors will be considered emergency exit doors. Emergency exit doors shall not have external door operation hardware installed. Emergency exit doors shall be equipped with deadlocking panic hardware on the inside and shall have no exterior hardware. Emergency exit doors should open outward. The perimeter emergency exit doors should be equipped with a local enunciator in order to alert people working in the area that someone exited the facility due to some type of emergency condition.

8.3 Windows.

8.3.1 Requirements.

8.3.1.1 All windows that might reasonably afford visual

surveillance of personnel, documents, materials, or activities within the facility shall be made opaque or equipped with blinds, drapes, or other coverings to preclude such visual surveillance.

8.3.1.2 Windows that are less than 18 feet above the ground

measured from the bottom of the windows or are easily accessible by means of objects directly beneath the windows shall be constructed from or covered with materials that will provide protection from forced entry. The protection provided to the windows need be no stronger than the strength of the contiguous walls.

8.3.2 Acoustic Security. For areas where classified will be

discussed on a regular or recurring basis, windows that might reasonably afford aural surveillance of discussions within the secure space may need to be protected by one of the following methods:

8.3.2.1 Heavy drapes or curtains.

8.3.2.2 Pressurized air flow on the inside of the secure area along the windows edge.

8.3.2.3 Installation of a sound masking system. (System to be approved by MPS6.)

8.4 Vents, Ducts, and Pipes.

8.4.1 Requirements. Utility openings such as ducts and vents

should be kept at less than man-passable (96 square inches) opening. Openings larger than 96 square inches (with no one dimension less than 6 inches) shall be protected by one of the following methods:

8.4.1.1 Steel bars of ½ inch diameter welded vertically and

horizontally six inches on center.

8.4.1.2 Grills constructed of 9-guage expanded steel.

8.4.1.3 Commercial sound baffles that are constructed of metal and permanently installed and no further apart than 6 inches.

8.4.2 Acoustic Security. For areas where classified will be

discussed on a regular or recurring basis, utility openings such as vents and ducts shall be acoustically protected by one of the following:

8.4.2.1 Commercial sound baffles rated for a STC 45. (If the

area has a STU-III/STE with a speakerphone, or is utilized as a classified VTC facility, then the sound baffles must meet a STC 50 rating.)

8.4.2.2 Commercial sound mufflers that meet the same ratings

as listed in subparagraph 8.4.2.1.

8.4.2.3 Installation of a sound masking system. (System to be approved by MPS6.)

9. Intrusion Detection System (IDS). All areas that reasonably afford access to a container or where classified data or equipment is stored shall be protected by an IDS unless continually occupied. Funding for the initial procurement and installation costs, as well as the recurring maintenance costs, is the responsibility of the user organization. These requirements should, to the extent possible, be made a part of the Inter-Service Support Agreement (ISSA) or Host Tenant Agreement.

9.1 Minimum Requirements. Minimum requirements for any alarmed area is two levels of alarm, consisting of perimeter sensors (balanced magnetic switches (BMS)) and volumetric motion sensors

(passive infrared (PIR), etc.) within the space. The alarm system shall enunciate at a station that is staffed 24 hours, 7 days per week including holidays.

9.1.1 Perimeter Sensors.

9.1.1.1 Access Door. The BMS on the access door to the alarmed area shall be monitored while the IDS is in the secure mode.

If required, there may be an associated timer circuit that is monitored while in the access mode to ensure the door does not stay open longer than a preset time period.

9.1.1.2 Emergency Exit Doors. All doors other than the access door are considered emergency exit doors, and the BMS on these doors shall be monitored while in the access and secure modes.

9.1.1.3 Windows. Windows shall be protected by an IDS, either by perimeter sensors or by the motion sensors located in the alarmed area.

9.1.2 Motion Sensors. Motion sensors located within the

alarmed area shall be monitored while in the secure mode only.

9.2 Intrusion Detection Equipment (IDE). All equipment

that makes up an IDS is considered IDE. Any failed IDE shall transmit an immediate alarm to the monitor station. Technical specifications for IDE can be found in Appendix 7 of DoD 5200.1-R, Information Security Program.

9.2.1 Control Unit. The IDS premise control unit (PCU) for

each alarmed area shall be located within that alarmed area.

9.2.2 Access/Secure Switch. The access/secure switch for

each alarmed area shall be located inside that alarmed area.

No capability shall exist that allows changing the access status of the IDS from a location outside of the secured area. In the secure mode, any unauthorized entry into the secured area shall cause an alarm to be transmitted to the monitor station.

Procedures must be established to ensure personnel requesting to access or secure an alarmed zone or space are authorized.

A locally developed sign/countersign or password system is the recommended method.

9.2.3 Sensors. Sensors within an IDS consist of point

(i.e., BMS) or volumetric (i.e., PIR, ultrasonic).

9.2.4 Cabling. The cabling between the sensors and the PCU

should be dedicated to IDE and must comply with national and local code standards. All IDE cabling shall be inside the alarmed area.

9.2.5 Power. Power for all IDE shall be commercial AC or DC

power. Emergency power shall consist of a protected independent backup power source that provides a minimum of 4 hours operating power. An illuminated indication shall exist at the PCU of the power source in use (AC or DC). Equipment at the monitor station shall indicate a failure in power source, a change in power source, and the location of the failure or change.

9.2.6 End of Line (EOL) Resistors. An EOL resistor will be

located at the sensors and not installed in the PCU.

9.2.7 Tamper Protection. An IDE component located inside or

outside the alarmed area will be tamper protected.

9.3 Integrated Access Control System (IACS). If an IACS is

part of the IDS, access control reports shall be subordinate in priority to reports from intrusion alarms.

9.4 False Alarms. Incidents of false alarms should not exceed one in a period of 30 days for any single alarmed area. Any repeat false alarms should be reported to the alarm provider.

9.5 Transmission Lines. All transmission lines that leave the secured area and are inside a building will be routed in rigid galvanized steel conduit. If routed outside a building, they will be buried at least 30 inches below the ground surface.

When the transmission line leaves the facility and traverses an uncontrolled area, 128-bit encryption should be used; however, if 128-bit encryption is not available, Class I or Class II line supervision shall be used.

9.5.1 Class I Line Supervision. Class I line supervision is

achieved through the use of an algorithm certified by the National Institute of Standards and Technology (NIST) or another independent testing laboratory.

9.5.2 Class II Line Supervision. Class II line supervision

refers to systems in which the transmission is based on pseudo random generated or digital encoding using an interrogation and response scheme throughout the entire communication or Underwriter's Laboratory Class AA line supervision. The signal shall not repeat itself within a minimum 6-month period.

Class II security shall be impervious to compromise using resistance, voltage, current, or signal substitution techniques.

10. Access Control System (ACS). An ACS is a system to identify and/or admit personnel with properly authorized access to a secure area using physical, electronic, and/or human controls. The access door shall be under visual control at all times during working hours to prevent access by unauthorized individuals. Regardless of how visual control is accomplished, an ACS is required on the entrance to all open storage areas.

The ACS will be an electric, mechanical, electromechanical, or automated type system. Uncleared persons will be escorted within the area by a cleared person who is familiar with the security procedures within the area.

10.1 Electric, Mechanical, or Electromechanical. An electric, mechanical, or electromechanical ACS may be used if the entrance is under visual control during duty hours and if meeting the following criteria:

10.1.1 The electronic control panel containing the mechanism by which the combination is set is located inside the secured area.

10.1.2 The control panel is installed in such a manner that an unauthorized individual in the immediate vicinity cannot observe the setting or changing of the combination.

10.2 Automated.

10.2.1 If an automated ACS is utilized, visual control is not required if (1) the automated ACS identifies an individual and authenticates the person’s identity to enter the secure area through the use of an identification (ID) card or badge and

(2) the ID card or badge uses embedded sensors, integrated circuits, magnetic strips, or other means of encoding data that identifies the facility and the individual to whom the card is issued.

10.2.2 In conjunction with subparagraph 10.2.1, a personal

identification number (PIN) may be required by the user organization. If a PIN is required, it must be separately entered into the system using a keypad device. The PIN must consist of at least four numbers and have no known or logical association to the individual.

10.2.3 Access to identification or authorizing data, operating system software, or any identifying data associated with the

ACS shall be limited to the fewest number of personnel possible. The ACS shall not be utilized for manpower or timekeeping purposes.

10.3 Access Control System Equipment.

10.3.1 Keypads. Keypad devices used in any ACS shall be

designed or installed to preclude unauthorized individuals in the immediate area from observing the selection of input numbers.

10.3.2 Electric Strikes. Electric strikes used in any ACS

shall be heavy-duty industrial grade. If the electric strikes have an external open strike plate, the plate will be protected by permanently installing a protective cover plate on the door.

10.3.3 Magnetic Locks. Magnetic locks shall be configured to

release automatically when a fire alarm is activated within the facility.

11. Cable Control.

11.1 All unclassified telecommunications cabling should enter the open storage area through a common opening. The cables should be installed in a professional manner, such that they can be visually inspected without difficulty.

11.2 Each conductor (fiber or metallic) should be accurately

accounted for from the point of entry. The accountability should identify the precise use of every conductor through labeling, log, or journal entries. Spare conductors will be identified and appropriately grounded.

11.3 Unused conductors will be removed. If removal is not

feasible, metallic conductors will be stripped, bound together, and grounded at the point of ingress/egress. Unused fiber conductors will be uncoupled from the interface within the open storage are, capped, and labeled as unused.

12. Telephone Systems. Telephones are an inherent vulner-ability that could easily allow the compromise of classified information without the need to enter a facility. As such, all telephone systems that support open storage areas, or areas where classified information is discussed or processed on a recurrent basis, should meet the criteria in one of the following subparagraphs:

12.1 Switch. The telephone switch shall meet the criteria

outlined in one of the following Telephone Security Group (TSG) or National Telecommunications Security Working Group (NTSWG) Standards:

12.1.1 TSG Standard 2, TSG Guidelines for Computerized

Telephone Systems.

12.1.2 NTSWG 2a, NTSGW Guidelines for Computerized Telephone

Systems (CTS) Supplemental.

12.1.3 NTSWG 2b, NTSWG Guidelines for Computerized Telephone

Systems (CTS) VoIP/Computer-Telephony Supplemental.

12.2 Instruments. All telephone instruments in the area must

be listed in TSG 6, Telephone Security Group Approved Equipment, and each phone instrument must have an approved TSG number.

13. Speakerphones. All requests for a speakerphone within an open storage area, or an area where classified is recurrently discussed, must be approved, in writing, by MPS6 prior to installation. If telephones installed in the area have speaker-phone capability and there is no approval for speakerphone use, all telephone instruments shall have their microphone elements disabled. A software disconnect located at the telephone switch/call manager does not provide the required level of security.

14. Classified Meetings or Conferences. A classified meeting or conference should be held only in areas approved for the level of information to be discussed. If the meetings are regularly scheduled in the same location, the area shall meet the acoustical protection requirements outlined in paragraph 6.

14.1 In cases where an area approved for the level of

classified that is going to be discussed is not available, extra measures are required for protection of the space until the conference or meeting is over.

14.1.1 After positive control of the area is achieved, uncleared personnel will not be allowed into the area without a cleared escort, and all entry and exit points will be guarded by cleared personnel.

14.1.2 The area shall be searched to ensure no recording or

transmitting equipment is in the area. If recording or transmitting equipment is located within the area, it shall be removed. If removal is not possible, the equipment will be disconnected from its power source for the entirety of the meeting or conference.

14.2 Prior to start of the conference, a check shall be made

to ensure the discussions being held are not easily recognizable outside the area. If discussions or presentations are heard outside the area, the guarded perimeter will be extended to a point where the audio is no longer recognizable. Under no circumstances shall wireless audio systems of any type be utilized for classified conferences or meetings.

14.3 Classified meetings or conferences shall not be held

at any areas other than properly cleared U.S. Government or U.S. Government contractor locations.

Return to:

Top of DISAI 240-110-33 Enclosure 2 DISAI 240-110-33 Enclosure 1 DISAI 240-110-33 Basic Publications Listing DISA Security Office Homepage Physical Security Page DISA Home Page cio-pubs@disa.mil - Last Revision: 31 January 2007

Attachment B https://edge.disa.mil/gm/folder-1.11.23092 https://edge.disa.mil/datahouse/mps/mps6/ https://edge.disa.mil/datahouse/mps/mps6/programhps/physechp.html http://www.disa.mil/