Make Model Manufacturer Function k. Does the IDS extend beyond the SCIF perimeter? □ □ Yes No Can the status of PCU be changed from outside IDS protection? □ □ Yes No If yes, is an audit conducted daily? □ □ Yes No Has the IDS configuration been approved by the CSA? □ □ Yes No l. Do any intrusion detection equipment components have audio or □ Yes □ No video capabilities? If yes, please explain: Has the CSA mitigated this capability? □ □ Yes No m. IDS Administrator SCI indoctrinated? □ □ Yes No n. External Transmission Line Security: What is the method of line □ □ Yes No security? Meets NIST; FIPS AES Encryption? If yes, has the encryption been certified by National Institute of □ □ Yes No Standards and Technology (NIST) or another independent testing laboratory? If not NIST FIPS AES, is there an alternate? □ □ Yes No If yes, please explain: Does the alternate line utilize any cellular or other Radio Frequency □ □ Yes No (RF) capability? If yes, provide manufacturer and Manufacturer Model o. Does any part of the IDS use a local or Wide Are □ □ □ Yes No N/A Network? (1) Is the Network Intrusion Detection Software (NIDS) □ □ □ Yes No N/A administrator at least Top Secret (collateral) cleared? (2) Is the host computer dedicated solely for security □ □ □ Yes No N/A purposes? (3) Is the host computer secured within an alarmed □ □ □ Yes No N/A area controlled at the Secret or higher level?
Make Model Manufacturer Function k. Does the IDS extend beyond the SCIF perimeter? □ Yes □ No Can the status of PCU be changed from outside IDS protection? □ Yes □ No If yes, is an audit conducted daily? □ Yes □ No Has the IDS configuration been approved by the CSA? □ Yes □ No l. Do any intrusion detection equipment components have audio or video capabilities? □ Yes □ No If yes, please explain: Has the CSA mitigated this capability? □ Yes □ No m. IDS Administrator SCI indoctrinated? □ Yes □ No n. External Transmission Line Security: What is the method of line security? Meets NIST; FIPS AES Encryption? □ Yes □ No If yes, has the encryption been certified by National Institute of Standards and Technology (NIST) or another independent testing laboratory? □ Yes □ No If not NIST FIPS AES, is there an alternate? □ Yes □ No If yes, please explain: Does the alternate line utilize any cellular or other Radio Frequency (RF) capability? □ Yes □ No If yes, provide manufacturer and Manufacturer Model o. Does any part of the IDS use a local or Wide Are Network? □ Yes □ No □ N/A (1) Is the Network Intrusion Detection Software (NIDS) administrator at least Top Secret (collateral) cleared? □ Yes □ No □ N/A (2) Is the host computer dedicated solely for security purposes? □ Yes □ No □ N/A (3) Is the host computer secured within an alarmed area controlled at the Secret or higher level? □ Yes □ No □ N/A
Technical-Specifications-for-SCIF-Construction-V1.2.docx