The organization must document and implement the fire and emergency services (FES) communications over a locations primary voice communication system to provide a direct callback telephone number and physical location of an FES caller to the public-safety answering point (PSAP) through a transfer of Automatic Number Identification (ANI) and Private Switch/Automatic Location Identification (PS/ALI) information or access to the PS/ALI database.

From Voice Video Policy Security Technical Implementation Guide

Part of SRG-POL-300639

Associated with: CCI-000235

VVSP-01-000194_rule The organization must document and implement the fire and emergency services (FES) communications over a locations primary voice communication system to provide a direct callback telephone number and physical location of an FES caller to the public-safety answering point (PSAP) through a transfer of Automatic Number Identification (ANI) and Private Switch/Automatic Location Identification (PS/ALI) information or access to the PS/ALI database.

Vulnerability discussion

Information protection needs are technology-independent, required capabilities to counter threats to organizations, individuals, or the Nation through the compromise of information (i.e., loss of confidentiality, integrity, or availability). Information protection needs are derived from the mission/business needs defined by the organization, the mission/business processes selected to meet the stated needs, and the organizational risk management strategy. Information protection needs determine the required security controls for the organization and the associated information systems supporting the mission/business processes.Inherent in defining an organizations information protection needs is an understanding of the level of adverse impact that could result if a compromise of information occurs. The security categorization process is used to make such potential impact determinations. Mission/business process definitions and associated information protection requirements are documented by the organization in accordance with organizational policy and procedure.One of the primary missions of Voice Video systems is the DISN Voice Precedence for mission-critical decision-maker communications, especially during times of crisis. A primary business function includes FES processes. These, along with other mission/business functions, must be documented in the System Security Plan (SSP).

Check content

Review the organizational Voice Video SSP for the primary voice communication system. Verify that the configuration provides the originating telephone number and the physical location of an FES caller to the PSAP through a transfer of ANI and PS/ALI information. Optionally, the PSAP must be provided direct access to the appropriate PS/ALI database. If the location of an FES caller is not provided to or is not accessible by the PSAP, this is a finding. NOTE: These requirements also apply to key telephone systems and installations where a single number has multiple appearances (appears on multiple telephones) so that individual instruments in the system can be identified.

Fix text

Document and implement the organizational Voice Video system to support FES at all locations. Configure the primary voice communication system to provide a direct callback telephone number and physical location of an FES caller to the PSAP through a transfer of ANI or PS/ALI information.

Pro Tips

Powered by sagemincer