Device Class 4 Areas
Detailed controls for Class 4 ITSRE, CVRSE and Vehicle OBE
Device Class 4:
- Confidentiality: High
- Integrity: High
- Availability: Moderate
Devices of this class must meet controls from NIST 800-53 and ISO/IEC 15408 in the following areas:
- Access Control
- Audit and Accountability
- Configuration Management
- Contingency Planning
- Identification and Authentication
- Incident Response
- Media Protection
- Physical and Environmental Protection
- Privacy
- Risk Assessment
- System and Communications Protection
- System and Information Integrity
- System and Services Acquisition
In addition, organizations that develop, operate or maintain devices of this class must meet controls from NIST 800-53 and ISO/IEC 15408 the areas above and the following additional areas:
- Awareness and Training
- Maintenance
- Personnel Security
- Planning
- Security Assessment and Authorization
Compared To Class 3 devices, devices Of this Class will have additional requirements In the areas of:
For example, ITS Roadside Equipment controlling reversible lanes as in TM16.