To facilitate cable management, and identify unauthorised additions or tampering.

]]> This section covers information relating to the labelling of cabling infrastructure installed in secure areas.

]]> The controls within this section are applicable only to communications infrastructure located within facilities in New Zealand. For deployable platforms or facilities outside New Zealand, Emanation Security Threat Assessments (Section 10.7) of this chapter of this manual MUST be consulted.

]]> Conduit labelling of a specific size and colour will facilitate identifying secure conduits.

]]> Agencies MUST comply with the conduit label colours specified in the following table.

Classification

Cable colour

Compartmented Information (SCI)

Orange/Yellow/Teal or other colour

TOP SECRET

 Red

SECRET

 Blue
CONFIDENTIAL Green

RESTRICTED and all lower classifications

 Black
]]> Conduit labelling in public or reception areas should not draw undue attention to the level of classified processing or any other agency capability.

]]> Conduit labels installed in public or visitor areas SHOULD NOT be labelled in such a way as to draw attention to or reveal classification of data processed or other agency capability.

]]> Clear labelling of wall outlet boxes reduces the possibility of incorrectly attaching IT equipment of a lesser classification to the wrong outlet.

]]> Wall outlet boxes MUST denote the classification, cable and outlet numbers.

]]> Wall outlet boxes SHOULD denote the classification, cable and outlet numbers.

]]> Recording labelling conventions in SOPs facilitates maintenance and fault finding.

]]> The SOPs SHOULD record the site conventions for labelling and registration.

]]> Labelling cables with the correct socket number, equipment type, source or destination minimises the likelihood of improperly cross connecting equipment and can assist in fault finding and configuration management.

]]> Agencies MUST label cables at each end, with sufficient information to enable the physical identification and inspection of the cable.

]]> Agencies SHOULD label cables at each end, with sufficient information to enable the physical identification and inspection of the cable.

]]> Cable registers provide a source of information that assessors can view to verify compliance.

]]> Agencies MUST maintain a register of cables.

]]> Agencies SHOULD maintain a register of cables.

]]> Cable registers allow installers and assessors to trace cabling for inspection, tampering or accidental damage. It tracks all cable management changes through the life of the system.

]]> The cable register MUST record at least the following information:

  • cable identification number;
  • classification;
  • socket number, equipment type, source or destination site/floor plan diagram; and
  • seal numbers if applicable.
]]> The cable register SHOULD record at least the following information:

  • cable identification number;
  • classification;
  • socket number, equipment type, source or destination site/floor plan diagram; and
  • seal numbers if applicable.
]]> Regular cable inspections, are a method of checking the cable management system against the cable register as well as detecting tampering, damage, breakages or other anomalies.

]]> Agencies SHOULD inspect cables for inconsistencies with the cable register in accordance with the frequency defined in the SSP.

]]>