UFC 4-021-02NF
27 September 2006
change 1, 23 October 2006
communication and power cables that are not directly protected by sensors by one of
the following methods:
9-6.8.5
In rigid metal conduit.
9-6.8.6
In concrete encased duct.
9-6.8.7 In direct buried conduit to a minimum of twenty-four inches (0.6 meters) below
finished grade.
9-6.8.8
Suspended at a minimum of 15.5 feet (4.5 meters) above the finished grade.
9-6.9
Physical Protection of Interior ESS. All interior intrusion detection sensors
and access control readers must have integral tamper protection switches. All intrusion
detection sensors, access control readers, and assessment equipment located outside
controlled areas must have tamper resistant enclosures. All intrusion detection sensors
and access control system cabling should be routed within the controlled area. If the
cables transverse an uncontrolled area, the cables must be locked, welded, brazed, or
secured with tamper resistant security fastners. Additionally, the following design criteria
needs to be applied:
9-6.9.1 All ESS control and DTM associated with the protection of high security areas
(Level Two and Three Restricted Areas), AA&E and controlled areas that process
Secret or higher classified information, must be enclosed in rigid metal conduit.
9-6.9.2 All enclosures, cabinets, housings, boxes, and fittings having hinged doors or
removable covers must be locked, welded, brazed, or secured with tamper resistant
security fastners and be tamper-alarmed.
9-6.9.3 Any metallic conduit that leaves an area that processes classified information
such as a SCIF must be decoupled (insert of nonmetallic conduit) when existing the
area.
9-6.9.4 For areas used for handling, storing, production, renovation, and shipping of
feet from the structure. The shielded cable or conduit must also be bonded to primary
and secondary ground girdles where they cross.
9-6.10
Radio Frequencies. RF systems must employ some form of tamper
protection such as:
9-6.10.1 The security system must use dedicated frequencies to transmit ESS alarm
data.
9-6.10.2 The system must detect and report intentional and unintentional jamming
attempts.
9-6.10.3 The system must transmit ESS alarms sent by non-hardware links even when
they occur during "off-air" periods caused by maintenance or failure.
124