PE-14 PE · Physical and Environmental Protection

Environmental Controls

✓ LOW ✓ MODERATE ✓ HIGH
2 Enhancements 1 Overlay 2 Related Controls
Graph
Export ▾

Requirements NIST SOURCE

Discussion (NIST Supplemental Guidance)

The provision of environmental controls applies primarily to organizational facilities that contain concentrations of system resources (e.g., data centers, mainframe computer rooms, and server rooms). Insufficient environmental controls, especially in very harsh environments, can have a significant adverse impact on the availability of systems and system components that are needed to support organizational mission and business functions.

Enhancements NIST SOURCE

PE-14(1) Automatic Controls LOW MODERATE HIGH

Employ the following automatic environmental controls in the facility to prevent fluctuations potentially harmful to the system: [automatic environmental controls].

Discussion

The implementation of automatic environmental controls provides an immediate response to environmental conditions that can damage, degrade, or destroy organizational systems or systems components.

Open full page for PE-14(1) →
PE-14(2) Monitoring with Alarms and Notifications LOW MODERATE HIGH

Employ environmental control monitoring that provides an alarm or notification of changes potentially harmful to personnel or equipment to [personnel or roles].

Discussion

The alarm or notification may be an audible alarm or a visual message in real time to personnel or roles defined by the organization. Such alarms and notifications can help minimize harm to individuals and damage to organizational assets by facilitating a timely incident response.

Open full page for PE-14(2) →

Implementation Guidance

Engineering Interpretation

Original engineering commentary written for this explorer — not NIST source text and not authoritative guidance.

No engineering interpretation has been authored for PE-14 yet. This section is architected to receive it — see the Requirements and Assessment sections above for the authoritative NIST source content in the meantime.

Assessment

NIST SP 800-53A REV 5.2.0

Assessment Objectives

  1. one or more of the following PARAMETER VALUES is/are selected: {temperature; humidity; pressure; radiation; <PE-14_ODP[02] environmental control>};
  2. environmental control(s) for which to maintain a specified level in the facility where the system resides are defined (if selected);
  3. acceptable levels for environmental controls are defined;
  4. frequency at which to monitor environmental control levels is defined;
  5. <PE-14_ODP[01] SELECTED PARAMETER VALUES> levels are maintained at <PE-14_ODP[03] acceptable levels> within the facility where the system resides;
  6. environmental control levels are monitored <PE-14_ODP[04] frequency>.

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing temperature and humidity control; temperature and humidity controls; facility housing the system; temperature and humidity controls documentation; temperature and humidity records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for system environmental controls; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing the maintenance and monitoring of temperature and humidity levels].

Overlays

OT/ICS Overlay SP 800-82r3

NIST SP 800-82r3 Appendix F, Table 22. Blank baseline means the control/control enhancement is not selected in that initial OT baseline.

LOW

  • Base control: Included (matches standard baseline)

MODERATE

  • Base control: Included (matches standard baseline)

HIGH

  • Base control: Included (matches standard baseline)

STIGs & CCIs

No STIG checks or CCI mappings are currently loaded for PE-14. This section is architected to display, per product: STIG ID, Finding ID, Severity, Title, Description, Check, Fix, CCI, and NIST control mapping — but nothing is populated here until a real DISA STIG/CCI dataset is ingested.

Learn more about STIG/CCI integration →

Evidence

Potential Evidence — Derived

Categorized from the SP 800-53A "Examine"/"Test" artifact list above by keyword — not an authoritative NIST evidence list.

Policy

  • Physical and environmental protection policy
  • system security plan

Testing

  • Mechanisms supporting and/or implementing the maintenance and monitoring of temperature and humidity levels

Other Records

  • procedures addressing temperature and humidity control
  • temperature and humidity controls
  • facility housing the system
  • temperature and humidity controls documentation
  • temperature and humidity records
  • other relevant documents or records