Cable management systems in shared government facilities are implemented in a secure and easily inspectable and maintainable way.

]]> This section provides specific requirements for cabling installed in shared Government facilities.

• A shared facility is a facility occupied by more than one agency.  A shared facility should have stricter physical and technical security controls than a non-shared facility. 
• A non-shared facility is a facility occupied solely by a single agency.

]]> This section is to be applied in addition to common requirements for cabling as outlined in the Section 10.1 - Cable Management Fundamentals.

]]> The controls within this section are applicable only to communications infrastructure located within facilities in New Zealand. For deployable platforms or facilities outside of New Zealand, Emanation Security Threat Assessments (Section 10.7) of this chapter of this manual will need to be consulted.

]]> Fibre optic cabling does not produce and is not influenced by electromagnetic emanations; as such it offers the highest degree of protection from electromagnetic emanation effects especially in a shared facility where you do not have total control over other areas of the facility.

]]> It is more difficult to tap than copper cabling.

]]> Many more fibres can be run per cable diameter than wired cables thereby reducing cable infrastructure costs.

]]> Fibre cable is the best method to future proof against unforeseen threats.

]]> Agencies SHOULD use fibre optic cabling.

]]> In a shared facility it is important that cabling systems are inspected for illicit tampering and damage on a regular basis and have stricter controls than a non-shared facility.

]]> In TOP SECRET areas, cables MUST be fully inspectable for their entire length.

]]> Cabling SHOULD be inspectable at a minimum of five-metre intervals.

]]> In a shared facility with another government agency, tighter controls may be required for sharing reticulation systems. Note also the red/black separation requirements in paragraph 10.1.5.

]]> Approved cable groups SHOULD have either a dividing partition or a visible gap between the individual cable groups. If the partition or gap exists, cable groups may share a common reticulation system.

]]> In a shared facility with another government agency, TOP SECRET cabling is enclosed in a sealed reticulation system to restrict access and control cable management.

]]> The front covers of conduits, ducts and cable trays in floors, ceilings and of associated fittings that contain TOP SECRET cabling, SHOULD be clear plastic.

]]> In a shared facility with another government agency, cabling run correctly in walls allows for neater installations while maintaining separation and inspectability requirements. Controls are slightly more stringent than in a non-shared facility.

]]> Cabling from cable trays to wall outlets SHOULD run in flexible or plastic conduit.

]]> Wall penetrations by cabling, requires the integrity of the classified area to be maintained. All cabling is encased in conduit with no gaps in the wall around the conduit. This prevents any visual access to the secure area.

]]> For wall penetrations that exit into a lower classified area, cabling SHOULD be encased in conduit with all gaps between the conduit and the wall filled with an appropriate sealing compound.

]]> In a shared facility with lesser-classified systems, it is important that TOP SECRET systems have control over the power system to prevent denial of service by deliberate or accidental means.

]]> TOP SECRET facilities SHOULD have a power distribution board, separately reticulated, located within the TOP SECRET area and supply UPS power to all equipment.

]]> Power filters are used to provide a filtered (clean) power supply and reduce opportunity for technical attacks. See also 10.1.32.

]]> Power filters SHOULD be used to provide a filtered power supply and reduce opportunity for technical attacks.

]]> Having a visible gap between cabinets facilitates inspection for any unauthorised, malicious or cross patch cabling.

]]> TOP SECRET cabinets SHOULD have a visible gap to separate them from lower classified cabinets.

]]>