Cover Page Company Logo

COVER PAGE COMPANY LOGO

SMALL COMPANYLOGO HERE Project: Part 2 - ICT Reference: ...... Prepared for: Base Base Engineering Assessment Planning, Estate Planning Branch – Defence Estate Report – INTERIM / FINAL and Infrastructure Group (delete as applicable) Revision: ..... Date: ......

Project No. | …………….., 2015 | Revision ...... Document Control Record

Document prepared by:

Company Name ABN Address: Australia

T ...... F ...... E ...... W ......

A person using [Company Name] documents or data accepts the risk of:  Using the documents or data in electronic form without requesting and checking them for accuracy against the original hard copy version.

 Using the documents or data for any purpose not agreed to in writing by Company Name].

DOCUMENT CONTROL

Report Title

Document ID Project Number

Client Client Contact

Rev Date Revision Details/Status Prepared by Author Verifier Approver

Current Revision 0

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision 0 Part 2 - ICT

Date Reference Revision

Company Name ABN: Address:

Australia T F E W

Project …….. | …….. 2015 | Revision Contents

1 Description of Service 1 1.1 Overview 1 1.2 Overall Assessment Outcomes 7 1.2.1 Capacity 7 1.2.2 Condition 7 1.2.3 Compliance 7 1.3 Proposed Redevelopment Scope 8 1.4 Recommendations for Maintenance and Changes to Practice 8 2 Communication Rooms 10 2.1 Description 10 2.2 Required Data 10 2.3 Capacity Assessment 11 2.4 Condition Assessment 14 2.5 Compliance Assessment 16 3 Communication Racks19 3.1 Description 19 3.2 Required Data 19 3.3 Capacity Assessment 20 3.4 Condition Assessment 23 3.5 Compliance Assessment 25 4 ICT Frames 29 4.1 Description 29 4.2 Required Data 29 4.3 Capacity Assessment 30 4.4 Condition Assessment 33 4.5 Compliance Assessment 34 5 Fibre Optic Cabling 38 5.1 Description 38 5.2 Required Data 38 5.3 Capacity Assessment 39 5.4 Condition Assessment 41 5.5 Compliance Assessment 44 6 Copper Cabling 47

Project ….. | …….. 2015 | Revision 6.1 Description 47 6.2 Required Data 47 6.3 Capacity Assessment 48 6.4 Condition Assessment 51 6.5 Compliance Assessment 53 7 Pit and Pipe Infrastructure 53 7.1 Description 53 7.2 Required Data 53 7.3 Capacity Assessment 53 7.4 Condition Assessment 53 7.5 Compliance Assessment 53

Abbreviations

Abbreviation Description AS Australian Standard BAN Base Area Network BEAP Base Engineering Assessment Program CCC Capacity, Condition and Compliance CIOG Chief Information Officer Group DEIG Defence Estate and Infrastructure Group DEMS Defence Estate Management System DESN Defence Engineering Services Network DSR Data Source Register DSN Defence Secret Network DSM Defence Security Manual DRN Defence Restricted Network DVN Defence Voice Network EMOS Estate Maintenance and Operation Services ERAT Estate Risk Assessment Tool FOBOT Fibre Optic Breakout Tray GFIS Geographical Facilities Information System GIS Geographic Information System HV High Voltage ICT Information and Communications Technology IP Internet Protocol ISM Australian Government Information Security Manual ISS Intake Switching Station LV Low Voltage Mbs Mega bits per second MMOF Multi-Mode Optical Fibre MSP Master Site Plan PABX Private Automated Branch Exchange PID Process and Instrument Drawing RIM Regional Information Manager RMU Ring Main Unit SC Subscriber Connector SCEC Security Construction and Equipment Committee

Project ….. | …….. 2015 | Revision Abbreviation Description SMOF Single-Mode Optical Fibre RU Rack Units UPS Uninterrupted Power Supply VoIP Voice over Internet Protocol WHS Workplace Health and Safety WoL Whole of Life ZSS Zone Switching Station

Project ….. | …….. 2015 | Revision 1 Description of Service

1. Overview This Part 2 of the report addresses the assessment of the capacity, condition and compliance of the Information and Communications Technology (ICT) systems at , incorporating . The assessments are based on a combination of existing information made available to the assessment team and site inspections and investigations to obtain any missing data necessary to complete the analysis.

1. Summary of ICT Services Outline the extent of service, what comprises this service on this site, its breakup and how it works

1. The ICT infrastructure at supports the following Defence related networks:

a. Carrier service;

b. Defence Voice Network (DVN) – Unclassified;

c. Defence Restricted Network (DRN) – Restricted;

d. Defence Secret Network (DSN) – Secret;

e. Defence Engineering Services Networks (DESN) including:

(1) Security access control;

(2) Security alarm monitoring;

(3) Emergency Lighting;

(4) Building Management System (BMS); and

(5) Fire alarms.

f. Contractor Networks.

2. These networks are supported by the following communications infrastructure elements, each of which are assessed as part of the Base Engineering Assessments Program (BEAP):

a. Communications rooms;

b. Communications racks;

c. Communications frames;

d. Fibre optic cabling;

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision e. Copper cabling; and

f. Pit and conduit.

Discuss the main network details (e.g. server locations, network distribution to sub-sites etc)

PHASE 1 Guidance: If parts of this table cannot be completed, or this section is partially incomplete, discuss the incomplete issues and explain why here with the text boxed:

 

1.1.1 Network Gross Replacement Value The estimated Gross Replacement Value (GRV) provides an indication of the cost liability for the existing ICT network at , should the entire system be replaced in a ‘like for like’ arrangement and to current standards. The GRV is based on current infrastructure cost rates, with an efficiency factor applied to represent the likely reductions in cost that could be achieved by replacing the entire network at once, as opposed to repairing or upgrading localised areas of the network (as per the individual BEAP recommendations). Table 1 summarises the estimated Gross Replacement Value for the ICT network by sub-service.

Table 1 | ICT GRV

Sub service Description Estimated GRV ($)1,2

Communication $ xxxxxx Rooms Communication Racks $ xxxxxx ICT Frames $ xxxxxx Fibre Optic Cabling $ xxxxxx

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Copper Cabling $ xxxxxx Pit and Pipe $ xxxxxx Infrastructure Total $ xxxxxx

Notes: 1. The Gross Replacement value is a capital investment cost current as of 2015, with a level of confidence of P50. The cost estimates exclude, preliminaries (design, project management, etc.), contingency, escalation, inflation for future CPI increases, as well as provision for base support activities, periodic maintenance, latent conditions and site contamination. 2. The cost estimates exclude potential efficiencies that could be achieved by rationalising or extending the systems and are based on a ‘like for like’ replacement.

2. ICT Assessment Outcomes The table below outlines the assessment outcomes for of each of the services main components.

Table 2 | ICT Assessment Outcomes

Assessment Spare Resultant Remedial Sub Service Capacity No. of Work Cost % of GRV3 Capacity Condition Compliance Indicator1 Issues Estimate2 Communication Refer Refer Refer table 2 % of assets Cost to Rooms table 2 table 2 below ‘within limits’ remediate below below Communication Racks ICT Frames Fibre Optic Cabling

Copper Cabling

Pit and Pipe Infrastructure OVERALL

To complete table 2 above refer to table 5 for results and Input the cost and resultant number of issues from Appendix A.1 data for each ICT network. PHASE 1 Guidance: If parts of this table cannot be completed, or this section is partially incomplete, discuss the incomplete issues and explain why here:

Notes for table 2 1. The spare capacity indicator represents the percentage of network assets that have a capacity rating of "within limits". Please refer to the Table 3 Service Assessment Parameters for the ranges of capacity ratings by sub-service. 2. Costs estimates are capital investment costs current as of 2015, with a level of confidence of P50. The cost estimates exclude, preliminaries (design, project management etc), contingency, escalation, inflation for future CPI increases, as well as provision for base support activities, periodic maintenance, latent conditions and site contamination. These costs comprise WHS immediate works (P1), urgent repairs or upgrades works within 1 year (P2), short term repair or upgrade works due within the next 1-5 year period (P3), medium term repairs or upgrade works due before 10 years (P4), and long term replacement costs as assets reach the end of their useful life >10 year period (P5). 3. The percentage of GRV figure compares the value of the required remediation works with the replacement value of the entire subservice.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision 3. ICT Network Assessment Outcomes by Risk The table below summarises the level of risk for each sub service element resulting from the risk assessment of each issue using the ERAT method. Table 3 | Risk assessment by sub service

Sub Service

Risk and Communic Communicat ICT Frames Fibre Optic Copper Pit and Grand Total Cost ation ion Racks Cabling Cabling Pipe Rooms Infrastruct ure Very High No. Est Cost High No. Est Cost Medium No. Est Cost Low No. Est Cost Total No. Total Est Cost

Notes for table 3 1. Costs estimates are capital investment costs current as of 2015, with a level of confidence of P50. The cost estimates exclude, preliminaries (design, project management etc), contingency, escalation, inflation for future CPI increases, as well as provision for base support activities, periodic maintenance, latent conditions and site contamination. These costs comprise WHS immediate works (P1), urgent repairs or upgrades works within 1 year (P2), short term repair or upgrade works due within the next 1-5 year period (P3), medium term repairs or upgrade works due before 10 years (P4), and long term replacement costs as assets reach the end of their useful life >10 year period (P5).

Discuss any Very High risks in the above table and their key issues, actions, remediation. PHASE 1 Guidance: If parts of this table cannot be completed, or this section is partially incomplete, discuss the incomplete issues and explain why here:

4. ICT Network Assessment Outcomes by Priority

The table below summarises the number of issues in each priority category along with the estimated cost of completing the recommended remedial actions. The assessment has been carried out using the prioritised work request (WR) categorisation system These include WHS immediate works (P1), urgent repairs or upgrades works required within a year (P2), short term repairs or upgrades within the next 1-5 year period (P3), medium term repairs or upgrade works (P4) due before 10 years, and long term replacement costs as assets reach the end of their useful life (P5), >10 year period.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Table 4 | Priority assessment by sub service

Sub Service Priority Communic Communicat ICT Frames Fibre Optic Copper Pit and Pipe Grand Total and Cost ation ion Racks Cabling Cabling Infrastructure Rooms P1 No. Est Cost P2 No. Est Cost P3 No. Est Cost P4 No. Est Cost P5 No. Est Cost Total No. Total Est Cost

Notes for table 4 1. Costs estimates are capital investment costs current as of 2015, with a level of confidence of P50. The cost estimates exclude, preliminaries (design, project management etc), contingency, escalation, inflation for future CPI increases, as well as provision for base support activities, periodic maintenance, latent conditions and site contamination.

PHASE 1 Guidance: If parts of this table cannot be completed, or this section is partially incomplete, discuss the incomplete issues and explain why here:

A full breakdown of issues, risk, priority, recommended remedial actions and cost is provided at Appendix A.1.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision The criteria used to assess the infrastructure for capacity, condition and compliance is defined in Table 5 below: Table 5 | Service Assessment Criteria

Criteria Used for Assessments Capacity Condition Compliance

Exceeded Unserviceable Non-Compliant 100% of service capacity has Not capable of functioning as Design does not comply with been used intended, obsolete equipment / applicable design guidelines, components, unable to be Australian Standards and/or Defence maintained – requiring full Policies requirements. replacement / upgrade.

Marginal Poor

Refer to definitions in Table 3 Deterioration is severe and is limiting the serviceability of the asset. Maintenance cost would be high

Deterioration is obvious and there is some serviceability loss

Within Limits Compliant Good Refer to definitions in Table 3 Signs of deterioration evident, Design complies with applicable serviceability would be impaired design guidelines, Australian very slightly. Standards and/or Defence Policies requirements

As New

No visible sign of deterioration recently constructed / installed or recently rehabilitated back to new condition.

The standard requirements vary for the infrastructure elements as shown in Table X.

Table 6 | Capacity Limit Definitions

Definition of ‘Within Limits’ Definition of ‘Marginal’ Element (% of service capacity used) (% of service capacity used) Communications Rooms Less than 75% 75 – 100%

Communications Racks Less than 50% 50 – 100%

Communications Frames Less than 75% 75 – 100%

Fibre Optic Cabling Less than 75% 75 – 100%

Copper Cabling Less than 75% 75 – 100%

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Pit and Pipe Less than 40% 40 – 100%

1.1.2 Standards and Guidelines The relevant standards, guidelines and legislative requirements used in this assessment include:

 The Australian Government Information Security Manual (ISM) 2013, which is produced by the Defence Signals Directorate (DSD). The manual is the standard which governs the security of government ICT systems. It complements the Protective Security Policy Framework;

 The Protective Security Policy Framework (PSPF) 2013, provides the appropriate controls for the Australian Government to protect its people, information and assets at home and overseas;

 Security Construction and Equipment Committee (SCEC) specifications;  AS/CA S008 – Requirements for authorized cabling products;

 AS/ACIF S009:2013 - Installation requirements for customer cabling (Wiring Rules);

 AS/NZS 3080:2013 – Generic cabling for commercial premises;

 AS/NZS 3084:2007 – Telecommunications pathways and spaces for commercial buildings;

 Defence Communications Room Standard v2.0;

 Defence Communications Cabling Standard (DCCS) v2.0; and  Defence Server Room Standard v1.0.

2. Overall Assessment Outcomes (as per results of the particular services assessment) This section will be included in the overview - Part 1 section 1.5.) The overall capacity, condition and compliance assessments are summarised as follows. 1. Capacity

2. Condition

3. Compliance

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision This is a high level summary of the findings on capacity, condition and compliance from this report noting Table 1 above. Discuss the above results by exception, and details such as Very High and High risk issues, extremes and high risks, cost recommendations for each service component List the resultant (by exception only) key issues / component, ie only P1 and P2 (noting the total Cost and Issues figures) and their associated risks and issues with Very High and High risk ratings and their associated remedial actions (noting total cost).

1.3 Proposed Redevelopment Scope The following scope of works is considered necessary for any future redevelopment of the base. Table 7 | Proposed Redevelopment Scope

Sub service Proposed Scope Cost Estimate1,2

Notes for table 7:

1. Costs estimates are capital investment costs current as of 2015, with a level of confidence of P50. The cost estimates therefore exclude preliminaries (design, project management etc), contingency, escalation, inflation for future CPI increases, as well as provision for base support activities, periodic maintenance, latent conditions and site contamination. These costs comprise WHS immediate works (P1), urgent repairs or upgrades works within 1 year (P2), short term repair or upgrade works due within the next 1-5 year period (P3), medium term repairs or upgrade works due before 10 years (P4), and long term replacement costs as assets reach the end of their useful life >10 year period (P5).

2. Value for money would be achieved where works are delivered as one project and brought forward in the program which would remove the need for the scheduled urgent repairs or upgrades works.

Very High and High risk items which can be appropriately addressed through the Maintenance program, are excluded from the redevelopment scope detailed in Table 4. These include….

The following Medium and Low risk items were included in the redevelopment scope because of .... e.g. pipe replacement (Med) has been included in the proposed scope due to the significant efficiencies in time, cost and reduced disruption to the base in undertaking these works in parallel with the valve replacements (High). Some commentary should be provided with regards to the expected timeframes of the above recommendations. If the majority fall in 15 years but a significant element (e.g. Fire fighting water replacement) is required in a much shorter timeframe (e.g. works may need to be split) highlight this to assist the reader’s interpretation of the above.

1.4 Recommendations for Maintenance and Changes to Practice A number of changes to current maintenance and operational practices are required to ensure the capacity, condition and compliance of ICT can be maintained. These maintenance and operational practices are also required to inform the timing for some of the remedial

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision actions included in the issues register, which may in turn impact the timing of the base redevelopment works. The recommended changes to maintenance and operational practices (including cost estimates) are noted in Table 8.

Table 8 | Recommended Maintenance activities and changes to practice

Recommendations for Category Noted issue from assessment maintenance or changes to Cost estimate ($)1 Frequency practice

Notes for Table 8: 1. Costs estimates are estimated maintenance costs current as of 2014 with a frequency as noted and with a level of confidence of P50. The cost estimates therefore exclude preliminaries (design, project management etc), contingency, escalation, inflation for future CPI increases, as well as provision for latent conditions and site contamination. Where cost estimates are not provided, the maintenance and changes to practice are understood to be captured by existing contract arrangements with no net increase in cost expected. 2 Communication Rooms

3. Description Outline the extent of this service component and what it comprises of on this site, its breakup and how it works e.g. Communications rooms house communications racks, frames and free standing equipment. The dimensions and spare space available within a room affects the ability to add new racks, frames or equipment and therefore the ability to provide new services from that location if existing racks / frames are full. The physical construction and locking of the room determines the ability of the room to be accredited for the networks served from the room. 4. Required Data The data used in the Communication Rooms capacity, condition and compliance assessments are detailed in the table below.

The ‘Required Data’ column identifies the data types necessary to make full capacity, condition and compliance assessments for this service. The second column “documents and data sources assessed’ details the actual data used in the assessment, If all of the required data types were not available, the alternative data sources used to inform this assessment are provided.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Table 9 | Required Communication Rooms Assessment Data e y n t c i o i n c t i a a i d l p n p Assessment Documents and Data a

Required Data DSR No. o C m

Sources C o C

Base Development History

History of base development, including XXXX DSR xxx    changes since commissioning Spatial

GIS, CAD design plans, site survey, room and equipment as-constructed drawings and equipment databases/types Demand Data

Design capacity and current utilisation / capacity audit reports Proposed or expected changes in demand Analysis data

Equipment arrangements, ratings, construction, age, clearances and earthing Condition audits and inspection records Installation compliance, audit, inspection reports and test sheets (including air conditioning, security installations and construction materials) Operations and Maintenance

Operations and Maintenance (O&M) manuals and data Previous operational issues Safety and Access

Maintenance Compliance Certificates and EMOS

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision y e n t c i o i n c t i a a i d l p n

Assessment Documents and Data a p

Sources C o C

SWMS/Procedures

If there were any issues in obtaining the required assessment data these issues must be discussed here. Where ‘alternative’ data sources have been used, they should be discussed here to confirm their relevance and how they have been used to substitute for the ‘ideal’ data source. . Discussion should also include any Phase 1 recommendations that were agreed, including:

 the risks associated with any gaps in the available information  a subjective assessment at completion of Phase 1 based on the known information

5. Capacity Assessment

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The capacity assessment for a communications room is determined by how many communication racks are currently installed within the room and how many additional racks could be installed in a standards compliant manner. The data required to determine this level of utilisation includes the dimensions and type of room and the number of existing racks, frames and other equipment currently installed within it.

The commentary should include generally what was/was not found during activities. This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

2. Assessment Outcomes

The capacity of the to meet current demands with capacity remaining after accounting for the following approved projects loads:

 Repeat the list of current approved projects from Section 2.5 of Part One – Overview. Provide commentary on the factors that have led to the assessment. Provide a commentary on the priority of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1. 6. Condition Assessment

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The condition assessment of individual communication rooms is based on the integrity and functionality of the building fabric and the required electrical, fire, mechanical and security systems within the room. The commentary should include generally what was/was not found during activities This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance:

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Explain here what was undertaken during Phase 1 If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here: Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

An overall assessment of each sub-site must be made. Statements such as the following must be used: The condition of the is assessed as, . Provide commentary on the factors that have led to the assessment. Provide a commentary on the impact of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “phase 1” Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1. 7. Compliance Assessment

1. Analysis The compliance analysis was performed in accordance with the following codes;

a) The Australian Government Information Security Manual (ISM);

b) The Protective Security Policy Framework (PSPF);

c) Security Construction and Equipment Committee (SCEC) specifications;

d) AS/CA S008 – Requirements for authorized cabling products;

e) AS/ACIF S009:2013 - Installation requirements for customer cabling (Wiring Rules);

f) AS/NZS 3080:2013 – Generic cabling for commercial premises;

g) AS/NZS 3084:2007 – Telecommunications pathways and spaces for commercial buildings;

h) Defence Communications Room Standard v2.0;

i) Defence Communications Cabling Standard (DCCS) v2.0; and,

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision j) Defence Server Room Standard v1.0.

A general description of how the analysis was carried out is to be provided. The compliance assessment for a communications room is determined by the adherence of installations to the standards and codes noted above. Typical elements assessed include:

e.g. - Physical security construction requirements (e.g. SCEC locks); - Adequate clearances around equipment; - The provision of specified engineering services (e.g. air conditioning, general purpose power outlets); - Earthing and the segregation of electrical and communication services; and, - Mandated labeling. The commentary should include generally what was/was not found during activities. This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1 If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here: Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1” An example table of common compliance assessment items:

Number of rooms with Non- Communication Room Non-compliances compliance

Inter-building fibre cabling less than 48 cores

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision No anti-static flooring provided

Incorrect or absent earthing

1,000 mm clearance to front and back of all racks not achieved

Readily accessible cable containment not achieved

Cable sheath colours not as per ISM

No sub-distribution board within the room

Security construction type not compliant

Laser warning signage missing

Incorrect labelling within the room

No air-conditioning

Racks not located in dedicated communications room

Total no. of non-compliances

An overall assessment of each sub-site must be made. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. PHASE 1 Guidance: If possible, nd assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

3. Overall Assessment for the Base/Precinct (If applicable) An overall assessment of the base/precinct must be made which takes into account all of the sub- sites. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. Provide a commentary on the impact of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. Insert the following statement at the end of this section:

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

A full list of issues and recommended remedial actions is provided at Appendix A1 3 Communication Racks

8. Description Outline the extent of this service component and what it comprises of on this site, its breakup and how it works e.g. Communication racks house fibre optic breakout trays (FOBOTs), patch panels, voice frame cabling and powered communications equipment – such as servers, switches and PABX’s. The number of spare rack units within a rack affects the ability to add new cabling and equipment needed to support additional services from that location. The physical construction and locking mechanism of the rack, in conjunction with the physical construction of the room and building where the rack is housed determine the classification of network equipment that can be stored within the rack.

9. Required Data The data used in the Communication Racks capacity, condition and compliance assessments are detailed in the table below.

Table 10 | Required Communication Racks assessment data

Sources C o C

GIS, CAD design plans, site survey, equipment as- constructed drawings and equipment databases/types Demand Data

Equipment arrangements, ratings, age and earthing Condition audits and inspection records Installation compliance, audit, inspection reports and test sheets Operations and Maintenance

Maintenance Compliance Certificates and EMOS SWMS/Procedures

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision  the risks associated with any gaps in the available information  a subjective assessment at completion of Phase 1 based on the known information

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The capacity assessment for communication racks is based on the number of spare rack units within a rack and comparing the racks overall utilisation with the parameters set out in Table 3. The commentary should include generally what was/was not found during activities. This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis. Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

The capacity of the to meet current demands with capacity remaining after accounting for the following approved projects loads:

 Repeat the list of current approved projects from Section 2.5 of Part One – Overview. Provide commentary on the factors that have led to the assessment. Provide a commentary on the priority of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1

11. Condition Assessment

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The communication racks condition assessment is based on the racks physical appearance, damage and age, The elements investigated include physical rack damage, missing end panels, the presence of rust and the operability of the locking mechanisms and handles. The commentary should include generally what was/was not found during activities. This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis. Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment . This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

An overall assessment of each sub-site must be made. Statements such as the following must be used: The condition of the is assessed as, . Provide commentary on the factors that have led to the assessment. Provide a commentary on the impact of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect.

PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “phase 1” Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision 12. Compliance Assessment

1. Analysis

The compliance analysis was performed in accordance with the following codes:

a. The Australian Government Information Security Manual (ISM);

b. The Protective Security Policy Framework (PSPF);

c. Security Construction and Equipment Committee (SCEC) specifications;

d. AS/ACIF S009:2013 - Installation requirements for customer cabling (Wiring Rules);

e. Defence Communications Room Standard v2.0; and

f. Defence Communications Cabling Standard (DCCS) v2.0

g. Defence Server Room Standard v1.0

A general description of how the analysis was carried out is to be provided. The compliance assessment for communication racks is determined by assessing the installation with the standards and codes noted above. This includes: e.g. - The class of rack construction; - The provision of SCEC endorsed locking mechanisms; - The provision of earthing; - Adequate accessibility; and - The provision of suitable labeling

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis. Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment . This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

An overall assessment of each sub-site must be made. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

Major nodes (inter-building) and minor nodes (intra-building) should be split out and discussed separately if possible/relevant for each sub-site given the different levels of associated risk. An example compliance summary table is included below:

Assessment Major Nodes Building Communications Total Communications Racks1 Rooms Racks2

Compliant

Non-compliant

Notes:

1. Major node communications racks support the building they are located in as well as other adjacent buildings and as such are “nodes”. The capacity of these provides an indication whether additional infrastructure can be supported by these communications rooms.

2. Building communications racks support the building they are located in only. Their capacity does not affect other parts of the network.

The compliance of racks should also be analysed by classification type and individual node and sub- sites where appropriate. Example classification table:

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Classification UNCLASSIFIED RESTRICTED SECRET Overall

Compliant

Non-compliant

3. Overall Assessment for the Base/Precinct (If applicable) An overall assessment of the base/precinct must be made which takes into account all of the sub- sites. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. Provide a commentary on the impact of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “phase 1”. Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1. 4 ICT Frames

13. Description Outline the extent of this service component and what it comprises of on this site, its breakup and how it works e.g. ICT frames house copper cabling termination modules. The quantity of spare blocks within a frame determines its ability to terminate new cables on the frame and thus provide new services from that frame.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision 14. Required Data The data used in the ICT Frames capacity, condition and compliance assessments are detailed in the table below.

Table X | Required ICT Frames assessment data e y n t c i o i n c t i a a i d l p n p Assessment Documents and Data a

Sources C o C

GIS, CAD design plans, site survey, equipment as- constructed drawings and equipment databases/types Demand Data

Equipment arrangements, ratings, age and earthing Condition audits and inspection records Installation compliance, audit, inspection reports and test sheets Operations and Maintenance

Operations and Maintenance (O&M) manuals and data Previous operational issues

Sources C o C

Safety and Access

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The capacity assessment for ICT frames is based on comparing the number of spare spaces in the frame with the total frame size and comparing this utilisation percentage with the parameters set out in Table 3.

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”.

2. Assessment Outcomes The capacity of the to meet current demands with capacity remaining after accounting for the following approved projects loads:

 Repeat the list of current approved projects from Section 2.5 of Part One – Overview. Provide commentary on the factors that have led to the assessment. Provide a commentary on the priority of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1” Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1 16. Condition Assessment

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The condition assessment for communication frames is based on the frames physical appearance, damage and age, The elements investigated include any physical damage to the back mount frame, termination modules or any other visible components, and the presence of any rust.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis. Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment . This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1” Major nodes (inter-building) and minor nodes (intra-building) should be split out and discussed separately if possible/relevant for each sub-site given the different levels of associated risk. An example condition summary table is included below:

ICT Frames Condition Major Node Frames1 Building Frames2 Total

As New

Unserviceable

Unknown (Unable to Assess)

Notes:

1. Major node frames support the building they are located in as well as other adjacent buildings and as such are “nodes”. The capacity of these provides an indication whether additional infrastructure can be supported by these communications rooms.

2. Building frames support the building they are located in only. Their capacity does not affect other parts of the network.

An overall assessment of each sub-site must be made. Statements such as the following must be used: The condition of the is assessed as, . Provide commentary on the factors that have led to the assessment. Provide a commentary on the impact of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1 17. Compliance Assessment

1. Analysis

b. AS/CA S008 – Requirements for authorized cabling products

c. AS/ACIF S009:2013 - Installation requirements for customer cabling (Wiring Rules);

d. AS/NZS 3080: 2013 – Generic cabling for commercial premises;

e. AS/NZS 3084: 2007 – Telecommunications pathways and spaces for commercial buildings;

f. Defence Communications Cabling Standard (DCCS) v2.0

A general description of how the analysis was carried out is to be provided. The compliance assessment for communication frames is determined by assessing the installation with the standards and codes noted above. This includes: e.g. - The provision of earthing; - The provision of surge protection on external cables; - The height of the top of the frame (below 1,800mm above finished floor level);

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision - Suitable clearances and mounting; and - The provision of suitable labeling and record books.

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis. Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment . This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”.

An overall assessment of each sub-site must be made. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”. Major nodes (inter-building) and minor nodes (intra-building) should be split out and discussed separately if possible/relevant for each sub-site given the different levels of associated risk. An example compliance summary table is included below:

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision ICT Frames Major Node Frames1 Building Frames2 Total

Compliant

Non-compliant

Notes:

1. Major node frames support the building they are located in as well as other adjacent buildings and as such are “nodes”. The capacity of these provides an indication whether additional infrastructure can be supported by these communications rooms.

2. Building frames support the building they are located in only. Their capacity does not affect other parts of the network.

3. Overall Assessment for the Base/Precinct (If applicable) An overall assessment of the base/precinct must be made which takes into account all of the sub- sites. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. Provide a commentary on the impact of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision 5 Fibre Optic Cabling

18. Description Outline the extent of this service component and what it comprises of on this site, its breakup and how it works 19. Required Data The data used in the Fibre Optic Cabling capacity, condition and compliance assessments are detailed in the table below.

Table x | Required Fibre Optic Cabling assessment data e y n t c i o i n c t i a a i d l p n p Assessment Documents and Data a

Sources C o C

GIS, CAD design plans, site survey, as- constructed drawings, equipment and cable types Demand Data

Fibre optic core counts and utilisation data Proposed or expected changes in demand Analysis data

Sources C o C

Cable and connector arrangements, ratings and age Condition audits, core test results and inspection records Installation compliance, audit, inspection reports and test sheets Operations and Maintenance

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The capacity assessment for a Fibre optic cable is determined by comparing how many of its cores are terminated on each FOBOT and the total number of useable cores within the cable. The utilisation percentage is then be compared with the parameters set out in Table 3 The commentary should include generally what was/was not found during activities This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis. Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment . This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”.

 Repeat the list of current approved projects from Section 2.5 of Part One – Overview. Provide commentary on the factors that have led to the assessment. Provide a commentary on the priority of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”. Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1.

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The condition assessment for fibre optic cabling is based on analysis of fibre test results and the physical condition of the cabling including damage at the cable terminations/FOBOT and the presence of any kinks or abrasions. The commentary should include generally what was/was not found during activities This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis. Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”.

PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision 22. Compliance Assessment

1. Analysis

b. AS/ACIF S008:2010 – Requirements for authorised cabling products;

c. AS/ACIF S009:2013 - Installation requirements for customer cabling (Wiring Rules);

d. AS/NZS 3080:2013 – Generic cabling for commercial premises; and

e. Defence Communications Cabling Standard (DCCS) v2.0.

A general description of how the analysis was carried out is to be provided. The compliance assessment for a fibre optic cable is determined by its adherence to the standards and codes noted above. Typical elements assessed include: e.g. - The cable type (SMOF / MMOF); - The connector types (LC, SC); and, - The number of cores within the cable. The commentary should include generally what was/was not found during activities This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .”

PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis. Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment .

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”.

An overall assessment of each sub-site must be made. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1” The compliance of fibre optic cabling should be analysed by classification type and individual node/ sub-sites where appropriate. Example table:

Building Links UNCLASSIFIED RESTRICTED SECRET Overall

Compliant

Non-Compliant

Total Fibre Links

An example table of common compliance assessment items:

Non-Compliance UNCLASSIFIED RESTRICTED SECRET Overall

Cables using SC connectors

Cables less than 48 cores

Inter-building multi-mode cable (currently in use)

3. Overall Assessment for the Base/Site (If applicable) An overall assessment of the base/precinct must be made which takes into account all of the sub- sites. Statements such as the following must be used: The compliance of the is assessed as .

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Provide commentary on the factors that have led to the assessment. Provide a commentary on the impact of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1. 6 Copper Cabling

23. Description Outline the extent of this service component and what it comprises of on this site, its breakup and how it works 24. Required Data The data used in the Copper Cabling capacity, condition and compliance assessments are detailed in the table below.

Table x | Required Copper Cabling assessment data

Sources C o C

Cable pair counts and utilisation data Proposed or expected changes in demand Analysis data

Cable arrangements, ratings and age Condition audits, cable test results and inspection records Installation compliance, audit, inspection reports and test sheets Operations and Maintenance

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision 25. Capacity Assessment

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The capacity assessment for copper cabling is determined by comparing how many pairs are present in each cable with the number of pairs currently in use. via analysis of cable record books, audits or visual inspection. This utilisation percentage is then compared with the parameters set out in Table 3. The commentary should include generally what was/was not found during activities. This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

 Repeat the list of current approved projects from Section 2.5 of Part One – Overview. Provide commentary on the factors that have led to the assessment.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Provide a commentary on the priority of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”. Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1.

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The condition assessment for copper cabling is based on the physical condition of the cabling including any damage at the cable terminations and any visible kinks and abrasions. The commentary should include generally what was/was not found during activities. This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .” PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis. Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment . This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”.

An overall assessment of each sub-site must be made. Statements such as the following must be used: The condition of the is assessed as, .

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Provide commentary on the factors that have led to the assessment. Provide a commentary on the impact of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect.

PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1. 27. Compliance Assessment

1. Analysis

f. The Australian Government Information Security Manual (ISM);

g. AS/ACIF S008: 2010 – Requirements for authorised cabling products;

h. AS/ACIF S009:2013 - Installation requirements for customer cabling (Wiring Rules);

i. AS/NZS 3080: 2013 – Generic cabling for commercial premises;

j. AS/NZS 3084: 2007 – Telecommunications pathways and spaces for commercial buildings; and,

k. Defence Communications Cabling Standard (DCCS) v2.0.

A general description of how the analysis was carried out is to be provided. The compliance assessment for a copper cable is determined by its adherence to the standards and codes noted above. Typical elements assessed include: e.g. - Adequate earthing of cable shields where applicable; - Separation of cabling and terminations from electrical cabling; and - Location of terminations and length of gel filled external cabling within buildings.

The commentary should include generally what was/was not found during activities. This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

The information in these sub sections should be restricted to specific issues related to the sub-site. If there were no specific issues related to the sub-site then use the following text under the sub-site name heading: “There were no specific issues that affected the analysis at .”

PHASE 1 Guidance: Explain here what was undertaken during Phase 1. If this analysis section is incomplete (partially), discuss the incomplete issues and explain why here. Be specific in the “wider avenues of enquiry” which were made to source the “required data” or other documents which have enabled a “partial” analysis. Outline what kind of activity(s) is/are required to complete the assessment (Phase 2) and why. What is the risk if this activity(s) (Phase 2) is/are not undertaken and how would it impact the assessment. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”

An overall assessment of each sub-site must be made. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1” Major nodes (inter-building) and minor nodes (intra-building) should be split out and discussed separately if possible/relevant for each sub-site given the different levels of associated risk. An example compliance summary table is included below:

Copper Cable Compliance Major Node Copper Building Copper Total Cabling1 Cabling2

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Compliant

Non-compliant

Notes:

1. Major node copper support the building they are located in as well as other adjacent buildings and as such are “nodes”. The condition of these provides an indication whether additional infrastructure can be supported by these communications rooms.

2. Building copper support the building they are located in only. Their condition does not affect other parts of the network.

3. Overall Assessment for the Base/Precinct (If applicable) An overall assessment of the base/precinct must be made which takes into account all of the sub- sites. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. Provide a commentary on the impact of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”.

Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision 7 Pit and Pipe Infrastructure

28. Description Outline the extent of this service component and what it comprises of on this site, its breakup and how it works e.g. Communication pits and pipes house the Bases fibre and copper cabling. The dimensions and spare space available in each affect the ability to provide new services near to that location. Physical construction, lid construction and locking mechanisms also determine whether the pit is accredited for the classification of communications networks housed within. 29. Required Data The data used in the Pit and Pipe Infrastructure capacity, condition and compliance assessments are detailed in the table below.

Table X | Required Pit and Pipe Infrastructure assessment data e y n t c i o i n c t i a a i d l p n p Assessment Documents and Data a

Sources C o C

Proposed or expected changes in demand Analysis data

Design capacity and current utilisation / capacity audit reports Condition audits, inspection records and test results Construction data - dimensions, arrangement and age Installation compliance, audit and inspection reports and test sheets Operations and Maintenance

Pit and building entry security compliance

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The capacity assessment for pits and pipes is determined by analysing the spare volume in each pit as well as the number of cables entering and exiting each pipe and the spare capacity for additional installations. The utilisation percentage is then compared with the parameters set-out in Table 3.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision The commentary should include generally what was/was not found during activities This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

 Repeat the list of current approved projects from Section 2.5 of Part One – Overview. Provide commentary on the factors that have led to the assessment. Provide a commentary on the priority of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”. Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1.

1. Analysis A general description of how the analysis was carried out is to be provided. e.g. The condition assessment for communication pit and pipes is determined by assessing their integrity and functionality. This includes analysis of physical appearance, damage, accessibility and serviceability of the pit structure, pit lid, plinths, locks and conduits in and out. The commentary should include generally what was/was not found during activities. This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk

PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”. Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1. 32. Compliance Assessment

1. Analysis

a) The Australian Government Information Security Manual (ISM);

b) The Protective Security Policy Framework (PSPF);

c) Security Construction and Equipment Committee (SCEC) specifications;

d) AS/ACIF S009:2013 - Installation requirements for customer cabling (Wiring Rules);

e) AS/NZS 3084: 2007 – Telecommunications pathways and spaces for commercial buildings; and,

f) Defence Communications Cabling Standard (DCCS) v2.0.

A general description of how the analysis was carried out is to be provided. The compliance assessment for pit and pipes is determined by its adherence to the standards and codes noted above. Typical elements assessed include: e.g.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision - The construction material of the pit; - The type and material of the lid; - The presence of a SCEC endorsed lock and locking mechanism; and, - The dimensions of the pit and pipes.

The commentary should include generally what was/was not found during activities This section should include detail and outcomes in order for the assessment to be made which may include physical tests, laboratory tests, access escorts, geotechnical, survey, service locations, etc. This section should highlight any generic issues that were encountered. It should be very clear in this section if we were able to obtain all the information that we needed to complete the analysis. The bulk of the information should be in this section, any information under a “sub-site name” section should only be about anything that was specific to that sub-site.

An overall assessment of each sub-site must be made. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1”.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision An example pit and pipe compliance table is included below:

ICT Pits and Pipes Compliance Number

Compliant

Non-compliant

Unknown (Unable to Assess)

3. Overall Assessment for the Base/Precinct (If applicable) An overall assessment of the base/precinct must be made which takes into account all of the sub- sites. Statements such as the following must be used: The compliance of the is assessed as . Provide commentary on the factors that have led to the assessment. Provide a commentary on the impact of the sub-sites on the overall assessment, for example, if the assessment is significantly affected by only one site or is consistent across all sites then provide a statement to this affect. PHASE 1 Guidance: If possible, an assessment should be made. If not, summarise the proposed/recommended Phase 2 activity. This section will be replaced/rewritten (partially) in the final report answering the questions/issues raised in the analysis section and above. Risks surrounding the assessment should be articulated here. Keep Phase 1 data inside a Box in order to articulate what is “final” and what is “Phase 1” Insert the following statement at the end of this section: A full list of issues and recommended remedial actions is provided at Appendix A1.

Project …………. | File 0a28c9287ce6e673ca41b9329a911662.doc | Date:……………. | Revision Company Logo

Company Name ABN ...... Address...... Company Address:...... Australia T ...... F ...... E ...... W ......

[Company Name] offices are located in: ...... , ...... , ...... , ...... , ...... , ...... , ...... ,