+PE-14 Environmental Controls
---+PE-14(01) Automatic Controls
---+PE-14(02) Monitoring with Alarms and Notifications

PE-14 Environmental Controls

Control

  1. Maintain [Selection(one-or-more): temperature; humidity; pressure; radiation; {{ insert: param, pe-14_odp.02 }} ] levels within the facility where the system resides at [Assignement: acceptable levels] ; and
  2. Monitor environmental control levels [Assignement: frequency].

Discussion

The provision of environmental controls applies primarily to organizational facilities that contain concentrations of system resources (e.g., data centers, mainframe computer rooms, and server rooms). Insufficient environmental controls, especially in very harsh environments, can have a significant adverse impact on the availability of systems and system components that are needed to support organizational mission and business functions.

Assessment Objective

  1. [Selection(one-or-more): temperature; humidity; pressure; radiation; {{ insert: param, pe-14_odp.02 }} ] levels are maintained at [Assignement: acceptable levels] within the facility where the system resides;
  2. environmental control levels are monitored [Assignement: frequency].

Assessment Method

Examine

Physical and environmental protection policy procedures addressing temperature and humidity control temperature and humidity controls facility housing the system temperature and humidity controls documentation temperature and humidity records system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for system environmental controls organizational personnel with information security responsibilities

1. Übersicht

PE-14(01) Automatic Controls

Control

Employ the following automatic environmental controls in the facility to prevent fluctuations potentially harmful to the system: [Assignement: automatic environmental controls].

Discussion

The implementation of automatic environmental controls provides an immediate response to environmental conditions that can damage, degrade, or destroy organizational systems or systems components.

Assessment Objective

[Assignement: automatic environmental controls] are employed in the facility to prevent fluctuations that are potentially harmful to the system.

Assessment Method

Examine

Physical and environmental protection policy procedures addressing temperature and humidity controls facility housing the system automated mechanisms for temperature and humidity temperature and humidity controls temperature and humidity documentation system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for system environmental controls organizational personnel with information security responsibilities
PE-14(02) Monitoring with Alarms and Notifications

Control

Employ environmental control monitoring that provides an alarm or notification of changes potentially harmful to personnel or equipment to [Assignement: personnel or roles].

Discussion

The alarm or notification may be an audible alarm or a visual message in real time to personnel or roles defined by the organization. Such alarms and notifications can help minimize harm to individuals and damage to organizational assets by facilitating a timely incident response.

Assessment Objective

  1. environmental control monitoring is employed;
  2. the environmental control monitoring capability provides an alarm or notification to [Assignement: personnel or roles] when changes are potentially harmful to personnel or equipment.

Assessment Method

Examine

Physical and environmental protection policy procedures addressing temperature and humidity monitoring facility housing the system logs or records of temperature and humidity monitoring records of changes to temperature and humidity levels that generate alarms or notifications system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for system environmental controls organizational personnel with information security responsibilities

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by PE-14 Environmental Controls – Assessment Procedure
is blocked by Temperature & Humidity Controls Monitoring
  • NIST -

    EN: Publications of the National Institute of Standards and Technology (NIST), U.S. Department of Commerce, https://www.nist.gov/, from their electronic versions (OSCAL; SP 800-63-4 from its HTML version, https://pages.nist.gov/800-63-4/). Works of NIST employees are not subject to copyright protection in the United States (17 U.S.C. § 105); the OSCAL content is dedicated to the public domain worldwide (CC0 1.0); outside the United States NIST grants the right to reprint its technical series publications in all formats (NIST copyright statement). Republished courtesy of the National Institute of Standards and Technology; each document names its citation. Divided into sections and converted into the GRCA format, the wording unchanged. Only the versions published by NIST are authoritative.

    DE: Veröffentlichungen des National Institute of Standards and Technology (NIST), U.S. Department of Commerce, https://www.nist.gov/, aus ihren elektronischen Fassungen (OSCAL; SP 800-63-4 aus ihrer HTML-Fassung, https://pages.nist.gov/800-63-4/). Werke von NIST-Beschäftigten sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105); die OSCAL-Inhalte sind weltweit gemeinfrei gestellt (CC0 1.0); außerhalb der USA räumt das NIST das Recht ein, seine Technical-Series-Publikationen in allen Formaten neu zu veröffentlichen (Copyright-Hinweis des NIST). „Republished courtesy of the National Institute of Standards and Technology“; jedes Dokument nennt seine Zitierangabe. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Maßgeblich sind allein die vom NIST veröffentlichten Fassungen.