Plain English, any career field. Answers cite the AF pub + paragraph, your command's supplement, and the federal (OSHA/CFR) standard behind it — with the official PDF one click away.
UFS 4-010-06 5 June 2026 UNIFIED FACILITIES SUPPLEMENT (UFS) APPROVED FOR PUBLIC RELEASE; DISTRIBUTION UNLIMITED CYBERSECURITY OF FACILITY- RELATED CONTROL SYSTEMS (FRCS) UFS 4-010-06 5 June 2026 FOREWORD Unified Facilities Supplements (UFS) provide non-mandatory, supplemental information in support of Unified Facilities Criteria (UFC). Only UFC establish enforceable criteria. UFS are For Information Only (FIO) and exist to help users understand and apply UFC requirements. The purpose of UFS is to offer procedural guidance, best practices, lessons learned, examples, and explanatory materials that clarify how to meet UFC criteria. They may include step-by-step procedures, checklists, illustrations, or decision aids, but they do not create new requirements or modify UFC content. UFS are deve
f the FRCS impact may exceed the mission impact. UFS 4-010-06 5 June 2026 43 Figure 4-2 FRCS Impact Determination Flowchart Part 2a Determining FRCS Impact Based on Mission Impact UFS 4-010-06 5 June 2026 44 Figure 4-3 FRCS Impact Determination Flowchart Part 2b Determining FRCS Impact Based on Mission Impact. UFS 4-010-06 5 June 2026 45 4-2.2.3 Addressing the critical control system and reducing system criticality Several options for addressing a critical FRCS (and possibly reducing its criticality) are suggested by the above drawing and are described in CHAPTER 4, such as the addition of manual controls, the use of local front ends or local display panels, and redundant equipment with independent control systems. If the standalone system approach is used, this might mean that the standal
, there is typically a security fence surrounding the facility and the electrical and mechanical infrastructure. UFS 4-010-06 5 June 2026 41 Figure 4-1 FRCS Impact Determination Flowchart Part 1 Determining Mission Impact UFS 4-010-06 5 June 2026 42 4-2.2.2.2 Impact of Control System on Mission Once the impact of the mission is known, the impact of the FRCS on the mission is evaluated. The flowchart continues in Figure 4-2 and Figure 4-3 and considers the relationship between the FRCS, the underlying equipment, and the mission itself: • A key consideration is whether the mission depends on the equipment controlled by the FRCS. A computer server room is clearly dependent on continuous cooling for operation, while an outdoor training area is clearly not. Other related considerations are: a.
dical Military Facilities UFC 4-010-06, Cybersecurity of Facility-Related Control Systems (FRCS) UFC 4-021-02, Electronic Security Systems UFS 3-490-06 5 June 2026 18 UNITED STATES DEPARTMENT OF DEFENSE ABA Accessibility Standard for Department of Defense Facilities https://www.access-board.gov/guidelines-and-standards/buildings-and-sites/about- the- aba-standards/aba-standards https://www.lrl.usace.army.mil/Portals/64/docs/Engineering/Design_AF/aba.pdf DEPSECDEF Memorandum, Subject: Access for People with Disabilities, 31 October 2008 https://www.access-board.gov/guidelines-and-standards/buildings-and-sites/about- the- aba-standards/background/dod-memorandum
026 2 component or system. UFC 1-200-01, section titled “Corrosion Prone Locations” identifies corrosive environments and humid locations requiring special attention. UFC 1-200-01, section titled “Requirements for Corrosion Prone Locations” provides examples of necessary actions. To determine Environmental Severity Classifications (ESC) for specific project locations refer to UFC 1-200-01 Appendix titled “ESC for DoD Locations”. 1-7 CYBERSECURITY. All facility-related control systems (including systems separate from a utility monitoring and control system) must be planned, designed, acquired, executed, and maintained in accordance with UFC 4-010-06, and as required by individual Service Implementation Policy. 1-8 UFC SUPPLEMENT (UFS) 3-410-01. \1\ UFS 3-410-01 contains supplemental informa
ent unique criteria for typical design disciplines and building systems, as well as for accessibility, antiterrorism, security, high performance and resilient building requirements, and safety. Use this UFS in addition to UFC 1-200- 01 and the UFCs and government criteria referenced therein. 1-5 CYBERSECURITY. All control systems (including systems separate from an energy management control system) must be planned, designed, acquired, executed, and maintained in accordance with UFC 4-010-06, Cybersecurity of Facility-Related Controls, and as required by individual Service implementation policy. 1-6 GLOSSARY. Appendix E contains acronyms, abbreviations, and terms. 1-7 REFERENCES. Appendix F contains a list of references used in this UFS. The publication date of the code or standard is not i
well as for accessibility, antiterrorism, security, high performance UFS 1-201-02 28 July 2025 2 and sustainability requirements, and safety. Use this UFS in addition to UFC 1-200-01 and the UFCs and government criteria referenced therein. Refer to UFC 1-201-01, for life safety and habitability-related design requirements for new construction of non-permanent facilities for use by the Department of Defense (DoD) in support of military operations. Also follow the requirements in UFC 1-201-01 for additions and alterations to existing facilities. 1-6 CYBERSECURITY. All facility-related control systems (including systems separate from a utility monitoring and control system) must be planned, designed, acquired, executed, and maintained in accordance with UFC 4-010-06, and as required by indiv
ded DoD Instruction 4715.22, “Environmental Management Policy for Contingency Locations,” February 18, 2016, as amended Office of the Chairman of the Joint Chiefs of Staff, “DoD Dictionary of Military and Associated Terms,” current edition Secretary of Defense Memorandum, “Mission Focus of the Department of Defense,” March 17, 2025 Unified Facilities Criteria 4-010-06, “Cybersecurity of Facility-Related Control Systems,” September 16, 2016 United States Code, Title 10
⚠ Unofficial. Answers come from indexed publication text and may be incomplete or out of date. Your MAJCOM/unit supplement may be stricter. Always verify against the official publication before acting, citing, or writing a finding.
New and updated AFIs, supplements, and OSHA cross-references as we index them — straight to your inbox.