PE-14

Requirement
1. Maintain [Selection (one or more): temperature; humidity; pressure; radiation; [Assignment: organization-defined environmental control]] levels within the facility where the system resides at [Assignment: organization-defined acceptable levels]; and
2. Monitor environmental control levels [Assignment: organization-defined frequency].

Discussion

The provision of environmental controls applies primarily to organizational facilities that contain concentrations of system resources (e.g., data centers, mainframe computer rooms, and server rooms). Insufficient environmental controls, especially in very harsh environments, can have a significant adverse impact on the availability of systems and system components that are needed to support organizational mission and business functions.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing temperature and humidity control; temperature and humidity controls; facility housing the system; temperature and humidity controls documentation; temperature and humidity records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for system environmental controls; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing the maintenance and monitoring of temperature and humidity levels].

ID	Assessment Objectives
PE-14a.	<PE-14_ODP[01] SELECTED PARAMETER VALUES> levels are maintained at <PE-14_ODP[03] acceptable levels> within the facility where the system resides;
PE-14b.	environmental control levels are monitored <PE-14_ODP[04] frequency>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!