Navigate

AT-3 (1)

AT-3 (1): Environmental Controls

The organization provides [Assignment: organization-defined personnel or roles] with initial and [Assignment: organization-defined frequency] training in the employment and operation of environmental controls.

Supplemental

Environmental controls include, for example, fire suppression and detection devices/systems, sprinkler systems, handheld fire extinguishers, fixed fire hoses, smoke detectors, temperature/humidity, HVAC, and power within the facility. Organizations identify personnel with specific roles and responsibilities associated with environmental controls requiring specialized training.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
NC3

Related Controls

The controls below (if any) were marked by NIST as being related to AT-3 (1).

Control	Description
PE-1	The organization: PE-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: PE-1a.1.: A physical and environmental protection policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and PE-1a.2.: Procedures to facilitate the implementation of the physical and environmental protection policy and associated physical and environmental protection controls; and PE-1b.: Reviews and updates the current: PE-1b.1.: Physical and environmental protection policy [Assignment: organization-defined frequency]; and PE-1b.2.: Physical and environmental protection procedures [Assignment: organization-defined frequency].
PE-13	The organization employs and maintains fire suppression and detection devices/systems for the information system that are supported by an independent energy source.
PE-14	The organization: PE-14a.: Maintains temperature and humidity levels within the facility where the information system resides at [Assignment: organization-defined acceptable levels]; and PE-14b.: Monitors temperature and humidity levels [Assignment: organization-defined frequency].
PE-15	The organization protects the information system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible, working properly, and known to key personnel.

Enhancements

The controls below (if any) add on to the requirements of AT-3 (1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AT-3 (1).

CCI	Definition
CCI-001481	The organization provides organization-defined personnel or roles with initial training in the employment and operation of environmental controls.
CCI-001482	The organization provides organization-defined personnel or roles with refresher training in the employment and operation of environmental controls in accordance with the organization-defined frequency.
CCI-001483	The organization defines a frequency for providing employees with refresher training in the employment and operation of environmental controls.
CCI-002050	The organization defines the personnel or roles to whom initial and refresher training in the employment and operation of environmental controls is to be provided.