<section title="10.2. Cable Management for Non-Shared Government Facilities"><subsection title="Objective"><paragraph
    title="10.2.1."


><![CDATA[<p>Cable management systems in non-shared government facilities are implemented in a secure and easily inspectable and maintainable way.</p>]]></paragraph>
 </subsection>
<subsection title="Context"> <block title="Scope"><paragraph
    title="10.2.2."


><![CDATA[<p>This section provides specific requirements for cabling installed in <strong>non-shared</strong> Government facilities.</p><ul>
<li>A <strong>non-shared</strong> facility is a facility occupied <strong>solely</strong> by a single agency.</li>
<li>A <strong>shared</strong> facility is a facility occupied by <strong>more than one</strong> agency.  A shared facility should have stricter physical and technical security controls than a non-shared facility. </li>
</ul>]]></paragraph>
<paragraph
    title="10.2.3."


><![CDATA[<p>This section is to be applied in addition to common requirements for cabling as outlined in the <a title="Cable management fundamentals" href="http://nzism.gcsb.govt.nz/ism-document#Section-13522">Section 10.1 - Cable Management Fundamentals</a>.</p>]]></paragraph>
</block>
<block title="Applicability of controls within this section"><paragraph
    title="10.2.4."


><![CDATA[<p>The controls within this section are only applicable to communications infrastructure located within facilities in New Zealand. For deployable platforms or facilities outside of New Zealand, Emanation Security Threat Assessments (<a title="Emanation Security Threat Assessments" href="http://nzism.gcsb.govt.nz/ism-document#Section-13859">Section 10.7</a>) of this manual will need to be consulted.</p>]]></paragraph>
</block>
</subsection>
<subsection title="References"><paragraph
    title="10.2.5."


><![CDATA[<p class="NormS10C2">Further references can be found at:</p><table class="table-main">
<tbody>
<tr>
<td><strong>Reference</strong></td>
<td><strong>Title</strong></td>
<td><strong>Publisher</strong></td>
<td><strong>Source</strong></td>
</tr>
<tr>
<td><strong><strong>NZCSS 400</strong></strong></td>
<td><strong>New Zealand Communications Security Standard No 400 (Document classified CONFIDENTIAL)</strong></td>
<td style="text-align: center;">GCSB</td>
<td>
<p>GCSB</p>
<p>CONFIDENTIAL document available on application to authorised personnel</p>
</td>
</tr>
<tr>
<td>
<p><strong><strong>AS/NZS 3000:2007/Amdt 2:2012</strong></strong></p>
</td>
<td>
<p><strong>Electrical Installations (Known as the Australia/New Zealand Wiring Rules</strong></p>
</td>
<td style="text-align: center;">
<p>Standards NZ</p>
</td>
<td><a title="Standards NZ" rel="noopener noreferrer" href="https://standards.govt.nz/" target="_blank">https://standards.govt.nz/</a></td>
</tr>
</tbody>
</table>]]></paragraph>
 </subsection>
<subsection title="Rationale &amp; Controls"> <block title="Cabling Inspection"><paragraph
    title="10.2.6.R.01."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


><![CDATA[<p>Regular inspections of cable installations are necessary to detect any unauthorised or malicious tampering or cable degradation.</p>]]></paragraph>
<paragraph
    title="10.2.6.C.01."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


    classification="Top Secret"
    compliance="Must"
    cid="2270"
><![CDATA[<p>In TOP SECRET areas or zones, all cabling MUST be inspectable at a minimum of five-metre intervals.</p>]]></paragraph>
<paragraph
    title="10.2.6.C.02."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


    classification="All Classifications"
    compliance="Should"
    cid="2271"
><![CDATA[<p>Cabling SHOULD be inspectable at a minimum of five-metre intervals.</p>]]></paragraph>
</block>
<block title="Cables sharing a common reticulation system"><paragraph
    title="10.2.7.R.01."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


><![CDATA[<p>Laying cabling in a neat and controlled manner, observing separation requirements, allows for inspections and reduces the need for individual cable trays for each classification.</p>]]></paragraph>
<paragraph
    title="10.2.7.C.01."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


    classification="All Classifications"
    compliance="Should"
    cid="2274"
><![CDATA[<p>Approved cable groups may share a common reticulation system but SHOULD have either a dividing partition or a visible gap between the differing cable groups or bundles.</p>]]></paragraph>
</block>
<block title="Cabling in walls"><paragraph
    title="10.2.8.R.01."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


><![CDATA[<p>Cabling run correctly in walls allows for neater installations while maintaining separation and inspectability requirements.</p>]]></paragraph>
<paragraph
    title="10.2.8.C.01."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


    classification="All Classifications"
    compliance="Should"
    cid="2277"
><![CDATA[<p>Flexible or plastic conduit SHOULD be used in walls to run cabling from cable trays to wall outlets.</p>]]></paragraph>
</block>
<block title="Cabinet separation"><paragraph
    title="10.2.9.R.01."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


><![CDATA[<p>Having a definite gap between cabinets allows for ease of inspections for any unauthorised or malicious cabling or cross patching.</p>]]></paragraph>
<paragraph
    title="10.2.9.C.01."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


    classification="Top Secret"
    compliance="Should"
    cid="2280"
><![CDATA[<p>TOP SECRET cabinets SHOULD have a visible inspectable gap between themselves and lower classified cabinets.</p>]]></paragraph>
</block>
<block title="Power Filters"><paragraph
    title="10.2.10.R.01."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


><![CDATA[<p>Power filters are used to provide a filtered (clean) power supply and reduce opportunity for technical attacks. See also <a title="Power Filters" href="http://nzism.gcsb.govt.nz/ism-document#Block-13568">10.1.32</a>.</p>]]></paragraph>
<paragraph
    title="10.2.10.C.01."

    tags="Infrastructure,Technical,Cable Management,Non-shared Government Facilities"


    classification="All Classifications"
    compliance="Should"
    cid="5902"
><![CDATA[<p>Power filters SHOULD be used to provide a filtered power supply and reduce opportunity for technical attacks.</p>]]></paragraph>
</block>
</subsection>
</section>
