CCI-000975

Employ organization-defined automatic environmental controls in the facility to prevent fluctuations potentially harmful to the system.

Implementation Guidance

Humidity controls are not required for general office areas where information system components may be in use and are only required where there are concentrations of information systems such as server farms, mainframes, etc. The organization being inspected/assessed must implement and maintain automatic temperature and humidity controls in the facility designed to prevent temperature and humidity fluctuations that would be potentially harmful to the information system.

Validation Procedures

The organization conducting the inspection/assessment conducts visual inspections and interviews personnel responsible for maintaining automatic temperature and humidity controls to validate the organization is employing automatic temperature and humidity controls for the information system to prevent fluctuations potentially harmful to the information system.

Compelling Evidence

1.) Evidence of automatic temperature and humidity controls

The controls below (if any) were marked by NIST as being related to CCI-000975.