Policy #: ITP-32-2 Effective: 04/01/17 Page #: 1 of 3 Subject: Cable Management Policy

1.0 PURPOSE The purpose of this policy is to ensure a consistent high quality data network cabling infrastructure throughout the company. 2.0 SCOPE The policy applies to all corporate network cabling projects and upgrades. 3.0 POLICY Network cabling refers to the medium used to carry an electronic signal between computing devices. It may be copper or fiber optic. Once cable is installed, it does not wear out. Instead its rated capacity gradually falls below that which the company expects for its networks. It is important to install the highest rated capacity cabling the budget will allow, based on the projected network requirements for that area over the next five years. 3.1 Roles and Responsibilities  The IT Network Manager is responsible for: o Developing a strategy for cabling all company areas based on anticipated usage over the next five years to ensure adequate capacity is in place. o Ensuring cable separation for external network connections to at least two points of presence. o Ensuring the correct cabling specifications are included in all cabling vendor agreements.  The network team members are responsible for: o Validating that new cable installation meet the approved company standard. o Maintaining the proper documentation of all cabling runs. o Performing acceptance testing on all new or repaired cabling. 3.2 Cabling Standards  All cables will be marked to indicate their terminations. The identifying scheme will be number, , area, and run number. For example, 5-3-A-16.  When ordering cabling, specify the type of cable, the amount of permissible signal loss on a run, and the type of connectors to attach. Also the acceptance testing that measures how the data loss over the cable. 3.3 Cabling Documentation  Cabling documentation will be maintained in a third-party cloud storage facility so that it is available in a disaster.  Access to documentation is restricted to the network team and IT managers.  The documentation of all cabling runs to include, at a minimum, the type of cable, bandwidth capacity cable identifiers on each end, and where each end of the cable is located. Also note the type of connectors at each end and who installed the cable/connectors. The type of network communication connection for each end will also be listed. 3.4 Cabling Threats A fire or severe structural damage to a wiring may require the re-cabling of entire areas of the facility. Damaged cables cannot be spliced. New cables must be run from the router to that

Revision #: 1.0 Supersedes: N/A Date: 04/01/17

Policy #: ITP-32-2 Effective: 04/01/17 Page #: 2 of 3 Subject: Cable Management Policy network switch, and then from the to the wiring closet.  Threats and mitigation for internal cabling: 1. In a wiring closet o Keep non-network personnel away from equipment in the wiring closet. Keep the and any locked. This will also prevent these spaces from being stuffed with the local department’s holiday decorations, old files, office supplies, janitor supplies, etc. o Ensure there is adequate fire suppression equipment (usually fused link sprinklers) present. This normally addressed by local building and safety codes. o Avoid heat damage to equipment. Some of these are adjacent to external and normally lack heat or air conditioning support. If practical, cut vents cut in the door, top to let heat out and bottom to let the cool air in. o Ensure all cabling is routed neatly in bundles, preferable in trays or conduit. 2. Outside a wiring closet o Avoid tampering or sabotage by enclosing all equipment in a locked . The cabinet must have enough clearance to open both the front and back for maintenance access. o Wiring cabinets must be maintained. The air filters periodically cleaned, the UPS tested and if they have their own heater or air conditioners, they must also be maintained. o All cables and wires leading into the external panel are to be encased in conduit, a cabling tray or under floor wire guide to inhibit tampering. o If this is in an open area such as a warehouse or factory, be sure it is protected from environmental influences (leaky , dust, etc.) and from being crushed by a forklift or toppling stacked material.  Threats and mitigation for external cabling The term “last mile” describes the wire from the telephone company’s central office or the ISP’s point of presence (POP) to your structure (and is usually more than a mile). This part of the network is the most vulnerable. Separate cable paths are the best mitigation. o The threat to the external network is that anywhere along its route, the cable may be severed or damaged. o Review cable separation standards with the company’s Internet service provider that provides this cabling connection. o Review with the company’s network provider the physical route that your cable takes from the wall of your building to its office. This will also show you how exposed the cable is to auto accidents (are the poles close to the road), to backhoes (is the cable buried along the road in some places), or any other number of threats. o Ensure there is a second cable run from your building (exit from the opposite end of the structure from the other cable) to a different POP. This will maintain the external network connection in case the usual POP is damaged or experiences an equipment failure, or if the cable to the POP was broken. o If possible, connect to a ring or mesh cabling topology.

Revision #: 1.0 Supersedes: N/A Date: 04/01/17

Policy #: ITP-32-2 Effective: 04/01/17 Page #: 3 of 3 Subject: Cable Management Policy

4.0 EXCEPTIONS TO THIS POLICY Any exceptions to this policy must be approved in advance by the company’s IT information security manager.

5.0 POTENTIAL PENALTIES FOR POLICY VIOLATION  Company employees who violate this policy may be suspended from work without pay for a period of time or discharged.  Temporary employees will be discharged back to their agencies.

6.0 REVISION HISTORY Date Revision # Description of Change 04/01/17 1.0 Initial creation. 7.0 INQUIRIES Direct inquiries about this policy to: George Jenkins, CIO Our Company, Inc. 2900 Corporate Drive Columbus, OH 43215 Voice: 614-555-1234 Fax: 614-555-1235 Email: [email protected]

Revision #: 1.0 Supersedes: N/A Date: 04/01/17