Personnel who maintain Facility Related Control Systems (FRCS) of any type are required to implement cybersecurity to attain and maintain an Authority to Operate (ATO) on their respective systems. This document is a guide for installation personnel owning and operating control systems to assist in addressing the cybersecurity process for FRCS in the Army through the Risk Management Framework (RMF) approach, which encompasses six steps. This manual walks the reader through the administrative aspects of each step.

No abstract

This work assessed the potential for development of a building automation system (BAS) specification (for heating, ventilating, and air conditioning systems, etc.) based on the BACnet ® communications protocol. Although BACnet is widely supported, no BAS specification exists that implements BACnet as an Open System. The BACnet protocol is detailed, includes comprehensive requirements, and also provides options in how individual vendors might choose to implement it. Such vendorspecific choices can effectively close the system to future open bid procurements, or result in incompatible systems. This work concluded that implementing BACnet in an Open manner will require extensively prescriptive requirements with a large amount of design and contract documentation. The resulting system may not integrate as tightly as desired and may therefore not be as user friendly to Army installation operations and maintenance (O&M) staff as other equivalent systems due mainly to the need for multiple configuration tools. This work recommends that development of BAS specifications based on BACnet continue and that a source selection process that pre-qualifies BACnet contractors be developed to help obtain open systems in accordance with those specifications. DISCLAIMER:The contents of this report are not to be used for advertising, publication, or promotional purposes. Citation of trade names does not constitute an official endorsement or approval of the use of such commercial products. All product names and trademarks cited are the property of their respective owners. The findings of this report are not to be construed as an official Department of the Army position unless so designated by other authorized documents.

No abstract