Assessment Objective

Determine if:

• PE-14(02)[01] environmental control monitoring is employed;
• PE-14(02)[02] the environmental control monitoring capability provides an alarm or notification to [Assignment: personnel or roles] when changes are potentially harmful to personnel or equipment.

Assessment Methods

Examine

• Physical and environmental protection policy
• procedures addressing temperature and humidity monitoring
• facility housing the system
• logs or records of temperature and humidity monitoring
• records of changes to temperature and humidity levels that generate alarms or notifications
• system security plan
• other relevant documents or records

Interview

• Organizational personnel with responsibilities for system environmental controls
• organizational personnel with information security responsibilities

Test

• Mechanisms supporting and/or implementing temperature and humidity monitoring

Powiązane zgłoszenia

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final