Information Security (INFOSEC) - Secure Room Storage Standards - Door Construction

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
high	V-245796	IS-02.01.02	IS-02.01.02	SV-245796r1008544_rule	2024-08-09	2

Description
Failure to meet construction standards could result in the undetected loss or compromise of classified material. REFERENCES: CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND), Encl A, paragraph 7.f.; Encl C, paragraph 10.a., and 10.b. NIST Special Publication 800-53 (SP 800-53), Rev 4, Controls: MP-4, PE-3 and PE-5 DoD Manual 5200.01, Volume 3, SUBJECT: DoD Information Security Program: Protection of Classified Information: Encl 3, para 1.b, 14.b. and Appendix to Encl 3, para 1.b.(3), 2.e.(4) and Glossary page 122, vault definition. Information Security Oversight Office, 32 CFR Parts 2001 and 2003 Classified National Security Information: paragraph 2001.53 Open storage areas, (b) Doors. DoD 5220.22-M (NISPOM), Incorporating Change 2, 18 May 2016, Chapter 5, Section 8, Construction Requirements.

Description

Failure to meet construction standards could result in the undetected loss or compromise of classified material. REFERENCES: CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND), Encl A, paragraph 7.f.; Encl C, paragraph 10.a., and 10.b. NIST Special Publication 800-53 (SP 800-53), Rev 4, Controls: MP-4, PE-3 and PE-5 DoD Manual 5200.01, Volume 3, SUBJECT: DoD Information Security Program: Protection of Classified Information: Encl 3, para 1.b, 14.b. and Appendix to Encl 3, para 1.b.(3), 2.e.(4) and Glossary page 122, vault definition. Information Security Oversight Office, 32 CFR Parts 2001 and 2003 Classified National Security Information: paragraph 2001.53 Open storage areas, (b) Doors. DoD 5220.22-M (NISPOM), Incorporating Change 2, 18 May 2016, Chapter 5, Section 8, Construction Requirements.

ℹ️ Check
Check all secure room doors (*containing inspectable SIPRNet assets) as follows: 1. The doors to the room (primary and secondary) shall be substantially constructed of wood or metal. (CAT II) 2. For outswing doors, hinge-side protection shall be provided by making hinge pins nonremovable (i.e. spot welding) or by using hinges with interlocking leaves that prevent removal. There are certain hinge pins made with internal locking pins or locking flanges and are acceptable if they cannot be removed. (CAT I) 3. Secondary (emergency exit only) doors other than those secured with locks meeting FF-L-2740 shall be secured from the inside with deadbolt emergency egress hardware, a deadbolt, or a rigid wood or metal bar that extends across the width of the door. IAW Unified Facilities Criteria (UFC) UFC 4-026-01, 4 Mar 2020, section 5-5.5. All non-entry doors to the defense layer must present a blank, flush surface to the outside and have internal locking or bolting mechanisms to reduce vulnerability to attack (to the secure room) (CAT I) 4. Secondary doors (doors other than those secured with locks meeting FF-L-2740) shall be secured from the inside with deadbolt emergency egress hardware, a deadbolt, or a rigid wood or metal bar that extends across the width of the door. These deadbolt locks shall be secured when the combination lock on the primary door is spun. (CAT I) TACTICAL ENVIRONMENT: This check is applicable where secure rooms are used to protect classified materials or systems. The only exception will be for urgent (short term) tactical operations or other contingency situations where fixed facilities and equipment are not yet present or incapable of being used.

ℹ️ Check

Check all secure room doors (*containing inspectable SIPRNet assets) as follows: 1. The doors to the room (primary and secondary) shall be substantially constructed of wood or metal. (CAT II) 2. For outswing doors, hinge-side protection shall be provided by making hinge pins nonremovable (i.e. spot welding) or by using hinges with interlocking leaves that prevent removal. There are certain hinge pins made with internal locking pins or locking flanges and are acceptable if they cannot be removed. (CAT I) 3. Secondary (emergency exit only) doors other than those secured with locks meeting FF-L-2740 shall be secured from the inside with deadbolt emergency egress hardware, a deadbolt, or a rigid wood or metal bar that extends across the width of the door. IAW Unified Facilities Criteria (UFC) UFC 4-026-01, 4 Mar 2020, section 5-5.5. All non-entry doors to the defense layer must present a blank, flush surface to the outside and have internal locking or bolting mechanisms to reduce vulnerability to attack (to the secure room) (CAT I) 4. Secondary doors (doors other than those secured with locks meeting FF-L-2740) shall be secured from the inside with deadbolt emergency egress hardware, a deadbolt, or a rigid wood or metal bar that extends across the width of the door. These deadbolt locks shall be secured when the combination lock on the primary door is spun. (CAT I) TACTICAL ENVIRONMENT: This check is applicable where secure rooms are used to protect classified materials or systems. The only exception will be for urgent (short term) tactical operations or other contingency situations where fixed facilities and equipment are not yet present or incapable of being used.

✔️ Fix
All secure room doors (*containing inspectable SIPRNet assets) must meet the following standards: 1. The doors to the room (primary and secondary) shall be substantially constructed of wood or metal. 2. For outswing doors, hinge-side protection shall be provided by making hinge pins nonremovable (i.e. spot welding) or by using hinges with interlocking leaves that prevent removal. There are certain hinge pins made with internal locking pins or locking flanges and are acceptable if they cannot be removed. 3. Secondary (emergency exit only) doors other than those secured with locks meeting FF-L-2740 shall be secured from the inside with deadbolt emergency egress hardware, a deadbolt, or a rigid wood or metal bar that extends across the width of the door. IAW Unified Facilities Criteria (UFC) UFC 4-026-01, 4 Mar 2020, section 5-5.5. All nonentry doors to the defense layer must present a blank, flush surface to the outside and have internal locking or bolting mechanisms to reduce vulnerability to attack (to the secure room). 4. Secondary doors (doors other than those secured with locks meeting FF-L-2740) shall be secured from the inside with deadbolt emergency egress hardware, a deadbolt, or a rigid wood or metal bar that extends across the width of the door. These deadbolt locks shall be secured when the combination lock on the primary door is spun.

✔️ Fix

All secure room doors (*containing inspectable SIPRNet assets) must meet the following standards: 1. The doors to the room (primary and secondary) shall be substantially constructed of wood or metal. 2. For outswing doors, hinge-side protection shall be provided by making hinge pins nonremovable (i.e. spot welding) or by using hinges with interlocking leaves that prevent removal. There are certain hinge pins made with internal locking pins or locking flanges and are acceptable if they cannot be removed. 3. Secondary (emergency exit only) doors other than those secured with locks meeting FF-L-2740 shall be secured from the inside with deadbolt emergency egress hardware, a deadbolt, or a rigid wood or metal bar that extends across the width of the door. IAW Unified Facilities Criteria (UFC) UFC 4-026-01, 4 Mar 2020, section 5-5.5. All nonentry doors to the defense layer must present a blank, flush surface to the outside and have internal locking or bolting mechanisms to reduce vulnerability to attack (to the secure room). 4. Secondary doors (doors other than those secured with locks meeting FF-L-2740) shall be secured from the inside with deadbolt emergency egress hardware, a deadbolt, or a rigid wood or metal bar that extends across the width of the door. These deadbolt locks shall be secured when the combination lock on the primary door is spun.