PE-15

Requirement

Protect the system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible, working properly, and known to key personnel.

Discussion

The provision of water damage protection primarily applies to organizational facilities that contain concentrations of system resources, including data centers, server rooms, and mainframe computer rooms. Isolation valves can be employed in addition to or in lieu of master shutoff valves to shut off water supplies in specific areas of concern without affecting entire organizations.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing water damage protection; facility housing the system; master shutoff valves; list of key personnel with knowledge of location and activation procedures for master shutoff valves for the plumbing system; master shutoff valve documentation; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for system environmental controls; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Master water-shutoff valves; organizational process for activating master water shutoff].

ID	Assessment Objectives
PE-15[04]	the master shutoff or isolation valves are known to key personnel.
PE-15[01]	the system is protected from damage resulting from water leakage by providing master shutoff or isolation valves;
PE-15[02]	the master shutoff or isolation valves are accessible;
PE-15[03]	the master shutoff or isolation valves are working properly;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!