id: "PE-14" title: "Environmental Controls" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-14" priority: "P2" implementation_level: "organization" enhancements: - pe-14.1 - pe-14.2
Maintain {{ insert: param, pe-14_odp.01 }} levels within the facility where the system resides at {{ insert: param, pe-14_odp.03 }} ; and
Monitor environmental control levels {{ insert: param, pe-14_odp.04 }}.
Guidance
The provision of environmental controls applies primarily to organizational facilities that contain concentrations of system resources (e.g., data centers, mainframe computer rooms, and server rooms). Insufficient environmental controls, especially in very harsh environments, can have a significant adverse impact on the availability of systems and system components that are needed to support organizational mission and business functions.
Assessment Objective: {{ insert: param, pe-14_odp.01 }} levels are maintained at {{ insert: param, pe-14_odp.03 }} within the facility where the system resides;
Assessment Objective: environmental control levels are monitored {{ insert: param, pe-14_odp.04 }}.
Physical and environmental protection policy
procedures addressing temperature and humidity control
temperature and humidity controls
facility housing the system
temperature and humidity controls documentation
temperature and humidity records
system security plan
other relevant documents or records
Organizational personnel with responsibilities for system environmental controls
organizational personnel with information security responsibilities
Mechanisms supporting and/or implementing the maintenance and monitoring of temperature and humidity levels