Device Class 3 Areas

Detailed controls for Class 3 ITSRE, CVRSE and Vehicle OBE

Device Class 3:

• Confidentiality: Moderate
• Integrity: High
• Availability: Moderate

Devices of this class must meet controls from NIST 800-53 and ISO/IEC 15408 in the following areas:

• Access Control
• Audit and Accountability
• Configuration Management
• Contingency Planning
• Identification and Authentication
• Incident Response
• Media Protection
• Physical and Environmental Protection
• Privacy
• Risk Assessment
• System and Communications Protection
• System and Information Integrity
• System and Services Acquisition

In addition, organizations that develop, operate or maintain devices of this class must meet controls from NIST 800-53 and ISO/IEC 15408 the areas above and the following additional areas:

• Awareness and Training
• Maintenance
• Personnel Security
• Planning
• Security Assessment and Authorization

Compared To Class 2 devices, devices Of this Class will have additional requirements In the areas of:

• Access Control
• Audit and Accountability
• Identification and Authentication
• Media Protection
• System and Communications Protection
• System and Information Integrity
• System and Services Acquisition

For example, ITS Roadside Equipment providing Transit Signal Priority or Emergency Vehicle Preemption such as in PS03.