PE-14: Environmental Controls
Control Family:
CSF v2.0 References:
Baselines:
- Low
- PE-14
- Moderate
- PE-14
- High
- PE-14
- Privacy
N/A
- OT Low (SP 800-82r3)
- PE-14
- OT Moderate (SP 800-82r3)
- PE-14
- OT High (SP 800-82r3)
- PE-14
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- PE-14: Temperature And Humidity Controls
Control Statement
- Maintain [Assignment (one or more): temperature, humidity, pressure, radiation, [Assignment: organization-defined environmental control] ] levels within the facility where the system resides at [Assignment: organization-defined acceptable levels] ; and
- Monitor environmental control levels [Assignment: organization-defined frequency].
Supplemental Guidance
The provision of environmental controls applies primarily to organizational facilities that contain concentrations of system resources (e.g., data centers, mainframe computer rooms, and server rooms). Insufficient environmental controls, especially in very harsh environments, can have a significant adverse impact on the availability of systems and system components that are needed to support organizational mission and business functions.
OT Discussion
Temperature and humidity controls are typically components of other OT systems (e.g., HVAC, process, or lighting systems) or can be a stand-alone and unique OT system. OT can operate in extreme environments and both interior and exterior locations. For a specific OT, the temperature and humidity design and operational parameters dictate the performance specifications. Power circuits, distribution closets, routers, and switches that support fire protection and life safety systems must be maintained at the proper temperature and humidity. When environmental controls cannot be implemented, use hardware that is engineered to withstand the OT’s unique environmental hazards.
Control Enhancements
PE-14(1): Automatic Controls
Baseline(s):
Employ the following automatic environmental controls in the facility to prevent fluctuations potentially harmful to the system: [Assignment: organization-defined automatic environmental controls].
PE-14(2): Monitoring with Alarms and Notifications
Baseline(s):
Employ environmental control monitoring that provides an alarm or notification of changes potentially harmful to personnel or equipment to [Assignment: organization-defined personnel or roles].