STIGQter: STIG Summary: Traditional Security Checklist Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Protected Distribution System (PDS) Construction - Hardened Carrier

DISA Rule

SV-245729r1138396_rule

Vulnerability Number

V-245729

Group Title

CS-04.01.02

Rule Version

CS-04.01.02

Severity

CAT I

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

1. Data cables must be installed in a carrier configured as a "Hardened Carrier" IAW CNSSI 7003. The carrier must be constructed of ferrous, electrical metallic tubing (EMT); ferrous pipe conduit; or ferrous rigid sheet metal ducting. Flexible conduit and armored cables must not be used as a hardened carrier. The carrier must not open to expose data cables (e.g., removable covers), except at approved pull boxes and termination boxes. The carrier must utilize elbows, couplings, nipples, and connectors of the same materials. All joints and connections must be sealed.

NOTE: A vendor product (AKA: Modular PDS) may be used if constructed of solid metal components and sealed - as described above.

2. The PDS must not be located within an Uncontrolled Access Area (UAA).

Check Contents

1. A Hardened Carrier IAW CNSSI 7003 must be constructed of ferrous, electrical metallic tubing (EMT); ferrous pipe conduit; or ferrous rigid sheet metal ducting. Flexible conduit and armored cables must not be used as a hardened carrier. The carrier must not open to expose data cables (e.g., removable covers), except at approved pull boxes and termination boxes. The carrier must utilize elbows, couplings, nipples, and connectors of the same materials. All joints and connections must be sealed.

NOTE: A vendor product (AKA: Modular PDS) may be used if constructed of solid metal components and sealed - as described above.

2. The PDS is not within an Uncontrolled Access Area (UAA).

Vulnerability Number

V-245729

Documentable

False

Rule Version

CS-04.01.02

Severity Override Guidance

1. A Hardened Carrier IAW CNSSI 7003 must be constructed of ferrous, electrical metallic tubing (EMT); ferrous pipe conduit; or ferrous rigid sheet metal ducting. Flexible conduit and armored cables must not be used as a hardened carrier. The carrier must not open to expose data cables (e.g., removable covers), except at approved pull boxes and termination boxes. The carrier must utilize elbows, couplings, nipples, and connectors of the same materials. All joints and connections must be sealed.

NOTE: A vendor product (AKA: Modular PDS) may be used if constructed of solid metal components and sealed - as described above.

2. The PDS is not within an Uncontrolled Access Area (UAA).

Check Content Reference

M

Target Key

5410