Meeting the Demand For Compliant, Secure, Classified Network Deployments

THE REQUIREMENT

U.S. Government and contractors must follow strict regulations to obtain and maintain an Authority to Operate (ATO) for networks handling classified National Security Information (Secret, Top Secret, or SCI). A key requirement is verifying an approved method to ensure the confidentiality, integrity, and availability of transmitted data.

THE PROBLEM

A common security practice is to deploy NSA-approved Type 1 encryption devices within the network. While encryption protects data in transit, it can introduce significant equipment and operating costs as well as potential bandwidth bottlenecks. It also does not prevent encrypted data from being stolen and retained for future decryption, nor does it protect the physical network from disruptions such as an accidental or malicious fiber cut.

When encryption is not in-place, these organizations, per guidelines of CNSSI 7003, must use a Protected Distribution System. However, in many cases the traditional PDS methods to protect the infrastructure cannot scale with today’s demand for access to classified networks. Hardened PDS, which requires installing unencrypted cables inside of metallic raceway:

• Is cost prohibitive,
• detracts from building aesthetics, and
• requires an extensive amount of time for installation that is disruptive to personnel and operations within the facilities.
• requires DAILY visual inspection along the entire PDS system to ensure the security of the network.

CNSSI COMPLIANT ALARMED PDS SOLUTION

The INTERCEPTOR^NXTM Optical Network Security System is an advanced Alarmed PDS solution designed to meet CNSSI 7003 compliance standards. Developed for the U.S. Federal Government and Military, INTERCEPTOR^NX ensures full adherence to Alarmed PDS requirements. It is widely used to efficiently and cost-effectively upgrade existing systems to an Alarmed PDS, especially following CORA (formally CCRI) evaluations.

Unlike legacy PDS, INTERCEPTOR^NX replaces unreliable daily visual inspections with automated 24/7/365 monitoring while improving aesthetics by eliminating exposed conduit. When paired with flexible armored cable, it can also remove the need for rigid metallic conduit. As a physical-layer solution, INTERCEPTOR^NX does not process data, enabling unrestricted bandwidth and cost savings while helping prevent data theft and protecting communications from physical disruptions such as fiber cuts.

Finally, because INTERCEPTOR^NX does not use acoustic sensing, it is safe from Eavesdropping over Fiber (EOF) risks for inside building deployments.  

END-TO-END SECURITY & COMPLIANCE

Safeguarding classified information in extensive facilities and complying with CNSSI 7003 standards for inspecting and testing secure infrastructure presents challenges for owners of an Alarmed Carrier PDS. Therefore, NIS has developed a comprehensive suite of ancillary, purpose-built products that complete the solution and help ensure compliance with CNSSI 7003 for classified network protection. This allows organizations to be confident in their readiness for CORA assessments.

NIS PRODUCTS THAT ADDRESS CNSSI 7003 REQUIREMENTS

The INSIGHT™ Alarm Management software provides centralized monitoring, automated inspections, and standardized threat response for classified network infrastructure.  All products in NIS' portfolio can be managed through INSIGHT's single pane of glass.  

The INTERCEPTOR AFFIRM^TM Automated Sensor Verification System automates periodic system testing by integrating with INSIGHT™ software, verifying each zone without human intervention. This ensures the integrity of INTERCEPTOR’s sensing cables and meets CNSSI 7003 zone verification requirements, reducing manual oversight and enhancing compliance.

To enhance security further and assist with alarm responses outside of regular hours, the INTERCEPTOR ECLIPSE^TM Data Shutoff System integrates with INSIGHT to disable data when an intrusion attempt is detected.  

The SENTINEL AXS^(TM) Automated Open/Closed sensors are designed to detect open and close events, making it ideal for lock boxes, maintenance holes, and other locations where a verified open or closed state is critical. 

For a printable PDF of our complete Alarmed PDS solution, click here.