CCI-002977

The organization plans the location or site of the facility where the information system resides with regard to physical and environmental hazards.

Implementation Guidance

The organization being inspected/assessed plans the location or site of the facility where the information system resides with regard to physical and environmental hazards. The organization must document the rationale for planning the location or site of the facility.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented rationale to ensure the organization being inspected/assessed plans the location or site of the facility where the information system resides with regard to physical and environmental hazards.

Compelling Evidence

1.) Documented rationale of location or site where information system resides

The controls below (if any) were marked by NIST as being related to CCI-002977.