Meeting the Demand For Compliant, Secure, Classified Network Deployments

THE REQUIREMENT

U.S. Government and contractors must follow strict regulations to obtain and maintain an Authority to Operate (ATO) for networks handling classified National Security Information (Secret, Top Secret, or SCI). A key requirement is verifying an approved method to ensure the confidentiality, integrity, and availability of transmitted data.

THE PROBLEM

A common security practice is to utilize NSA approved Type-1 encryption devices within the network. However, there are several disadvantages associated with the use of Type-1 encryption such as:

When encryption is not in-place, these organizations, per guidelines of CNSSI 7003, must use a Protected Distribution System. However, in many cases the traditional PDS methods to protect the infrastructure cannot scale with today’s demand for access to classified networks. Hardened PDS, which requires installing unencrypted cables inside of metallic raceway:

• Is cost prohibitive,
• detracts from building aesthetics, and
• requires an extensive amount of time for installation that is disruptive to personnel and operations within the facilities.
• requires DAILY visual inspection along the entire PDS system to ensure the security of the network.

CNSSI COMPLIANT ALARMED PDS SOLUTION

The INTERCEPTOR NX Optical Network Security System is an advanced Alarmed PDS solution designed to meet CNSSI 7003 compliance standards. Developed for the U.S. Federal Government and Military, INTERCEPTOR NX ensures full adherence to Alarmed PDS requirements. It is widely used to efficiently and cost-effectively upgrade existing systems to an Alarmed PDS, especially following CORA (formally CCRI) evaluations.

Unlike legacy PDS, INTERCEPTOR NX replaces unreliable daily visual inspections with automated 24/7/365 monitoring, improving aesthetics by eliminating exposed conduit. In some cases, it works with flexible armored cable to remove the need for rigid metallic conduit. As a physical layer device, INTERCEPTOR NX does not process data, ensuring unrestrained bandwidth and cost savings.  And unlike competing Alarmed Carrier solutions, INTERCEPTOR is designed specifically for PDS solutions with security as the highest priority.  

END-TO-END SECURITY & COMPLIANCE

Safeguarding classified information in extensive facilities and complying with CNSSI 7003 standards for inspecting and testing secure infrastructure presents challenges for owners of an Alarmed Carrier PDS. Therefore, NIS has developed a comprehensive suite of ancillary, purpose-built products that complete the solution and help ensure compliance with CNSSI 7003 for classified network protection. This allows organizations to be confident in their readiness for CORA assessments.

NIS PRODUCTS THAT ADDRESS CNSSI 7003 REQUIREMENTS

The INSIGHT™ Alarm Management software provides centralized monitoring, automated inspections, and standardized threat response for classified network infrastructure. 

The INTERCEPTOR AFFIRM^TM Automated Sensor Verification System automates periodic system testing by integrating with INSIGHT™ software, verifying each zone without human intervention. This ensures the integrity of INTERCEPTOR’s sensing cables and meets CNSSI 7003 zone verification requirements, reducing manual oversight and enhancing compliance.

To enhance security further and assist with alarm responses outside of regular hours, the INTERCEPTOR ECLIPSE^TM Data Shutoff System integrates with INSIGHT to disable data when an intrusion attempt is detected.  

The SENTINEL AXS^(TM) Automated Open/Closed sensors are designed to detect open and close events, making it ideal for lock boxes, maintenance holes, and other locations where a verified open or closed state is critical. 

For a printable PDF of our complete Alarmed PDS solution, click here.