PE-14(2)

Requirement

Employ environmental control monitoring that provides an alarm or notification of changes potentially harmful to personnel or equipment to [Assignment: organization-defined personnel or roles].

Discussion

The alarm or notification may be an audible alarm or a visual message in real time to personnel or roles defined by the organization. Such alarms and notifications can help minimize harm to individuals and damage to organizational assets by facilitating a timely incident response.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing temperature and humidity monitoring; facility housing the system; logs or records of temperature and humidity monitoring; records of changes to temperature and humidity levels that generate alarms or notifications; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for system environmental controls; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing temperature and humidity monitoring].

ID	Assessment Objectives
PE-14(02)[01]	environmental control monitoring is employed;
PE-14(02)[02]	the environmental control monitoring capability provides an alarm or notification to <PE-14(02)_ODP personnel or roles> when changes are potentially harmful to personnel or equipment.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!