- Maintains temperature and humidity levels within the facility where the information system resides at [Assignment: organization-defined acceptable levels]; and
- Monitors temperature and humidity levels [Assignment: organization-defined frequency].
This control applies primarily to facilities containing concentrations of information system resources, for example, data centers, server rooms, and mainframe computer rooms.
The organization employs automatic temperature and humidity controls in the facility to prevent fluctuations potentially harmful to the information system.
The organization employs temperature and humidity monitoring that provides an alarm or notification of changes potentially harmful to personnel or equipment.