PE-13: Fire Protection
Control Family:
CSF v1.1 References:
Next Version:
- NIST Special Publication 800-53 Revision 5:
- PE-13: Fire Protection
Control Statement
The organization employs and maintains fire suppression and detection devices/systems for the information system that are supported by an independent energy source.
Supplemental Guidance
This control applies primarily to facilities containing concentrations of information system resources including, for example, data centers, server rooms, and mainframe computer rooms. Fire suppression and detection devices/systems include, for example, sprinkler systems, handheld fire extinguishers, fixed fire hoses, and smoke detectors.
Control Enhancements
PE-13(1): Detection Devices / Systems
Baseline(s):
- High
The organization employs fire detection devices/systems for the information system that activate automatically and notify [Assignment: organization-defined personnel or roles] and [Assignment: organization-defined emergency responders] in the event of a fire.
PE-13(2): Suppression Devices / Systems
Baseline(s):
- High
The organization employs fire suppression devices/systems for the information system that provide automatic notification of any activation to Assignment: organization-defined personnel or roles] and [Assignment: organization-defined emergency responders].
PE-13(3): Automatic Fire Suppression
Baseline(s):
- Moderate
- High
The organization employs an automatic fire suppression capability for the information system when the facility is not staffed on a continuous basis.
PE-13(4): Inspections
Baseline(s):
The organization ensures that the facility undergoes [Assignment: organization-defined frequency] inspections by authorized and qualified inspectors and resolves identified deficiencies within [Assignment: organization-defined time period].