Home > Architecture > Security >

Emergency Security Group

The "Emergency" group includes architecture flows that support emergency response and related critical public safety activities. These flows have critical availability and integrity requirements.

Security Services

Service	Importance	Service Description
Confidentiality	Medium	The system should prevent unauthorized disclosure of information deemed sensitive.
Integrity	High	The system should ensure that information is protected from unauthorized intentional or unintentional modifications.
Availability	High	The system should protect critical ITS services in order to prevent degradation or denial of the ITS services to users of the services. Single points of failure should be avoided.
Accountability	High	The system should provide protection against a sender of an information transmission later denying that they sent the information. The system should provide protection against a receiver of an information transmission later denying that they received the information. This concept is known as Non-Repudiation or Accountability.
Authentication	High	The system should verify the identity of a user and/or other system prior to granting access to a requested resource.
Auditing	High	The system should have the capability to trace ITS subsystem and individual user actions and activities. The auditing function of the system places the actions and activities in an audit trail that is protected from unauthorized access and modification.
Access Control	High	The system should limit access to the resources of a subsystem to only those users and other subsystems that are properly authorized. After authenticating an entity, the system should have the capability to limit system access to information or resources based on that entity’s access privileges. The system should limit software modifications and upgrades to users and other systems that have authorization.

Security Objectives

Objective	Classification	Class Description
Confidentiality	Medium	Information that is sensitive and is intended for use only by specified ITS personnel
Integrity	High	Unauthorized or unintended modification of the information could result in degradation of public safety.
Availability	High	Loss of the information could jeapordize public safety.

Security Threats

Threat	Importance	Threat Description
Deception	High	A circumstance or event that may result in an authorized entity receiving false data and believing it to be true.
Disclosure	Medium	A circumstance or event whereby an entity gains access to data for which the entity is not authorized.
Disruption	High	A circumstance or event that interrupts or prevents the correct operation of system services and functions.

Architecture flows

• alarm
• alarm acknowledge
• alarm notification
• alert notification
• alert notification coordination
• alert status
• alerts and advisories
• border incident information
• border incident response status
• care facility status
• care facility status request
• commercial vehicle breach
• commercial vehicle data
• commercial vehicle data request
• decision support information
• disable commercial vehicle
• emergency acknowledge
• emergency data request
• emergency dispatch requests
• emergency dispatch response
• emergency notification
• emergency operations status
• emergency personnel information presentation
• emergency plan coordination
• emergency route request
• emergency routes
• emergency traffic coordination
• emergency transit schedule information
• emergency transit service request
• emergency transit service response
• emergency vehicle tracking data
• evacuation coordination
• evacuation information
• fleet and freight threat information
• freight breach
• hazmat information
• hazmat information request
• hazmat spill notification
• incident command information coordination
• incident command information presentation
• incident information
• incident information for public
• incident notification
• incident notification response
• incident report
• incident response coordination
• incident response status
• incident status
• maint and constr resource request
• maint and constr resource response
• patient status
• public health request
• public health response
• rail incident response status
• remote vehicle disable
• resource coordination
• resource deployment status
• resource request
• road closure notification
• safe vehicle disable
• secure area sensor data
• secure area surveillance data
• suggested route
• threat data for analysis
• threat information
• threat information coordination
• threat support data
• toll advisories
• transit emergency data
• transit incident information