Navigate

PE-12

PE-12: Emergency Lighting

The organization employs and maintains automatic emergency lighting for the information system that activates in the event of a power outage or disruption and that covers emergency exits and evacuation routes within the facility.

Supplemental

This control applies primarily to facilities containing concentrations of information system resources including, for example, data centers, server rooms, and mainframe computer rooms.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	high

Overlays
None

CSF Categories
PR.IP-5

Related Controls

The controls below (if any) were marked by NIST as being related to PE-12.

Control	Description
CP-2	The organization: a: Develops a contingency plan for the information system that: 1: Identifies essential missions and business functions and associated contingency requirements; 2: Provides recovery objectives, restoration priorities, and metrics; 3: Addresses contingency roles, responsibilities, assigned individuals with contact information; 4: Addresses maintaining essential missions and business functions despite an information system disruption, compromise, or failure; 5: Addresses eventual, full information system restoration without deterioration of the security safeguards originally planned and implemented; and 6: Is reviewed and approved by [organization-defined personnel or roles]; b: Distributes copies of the contingency plan to [organization-defined key contingency personnel (identified by name and/or by role) and organizational elements]; c: Coordinates contingency planning activities with incident handling activities; d: Reviews the contingency plan for the information system [organization-defined frequency]; e: Updates the contingency plan to address changes to the organization, information system, or environment of operation and problems encountered during contingency plan implementation, execution, or testing; f: Communicates contingency plan changes to [organization-defined key contingency personnel (identified by name and/or by role) and organizational elements]; and g: Protects the contingency plan from unauthorized disclosure and modification.
CP-7	The organization: a: Establishes an alternate processing site including necessary agreements to permit the transfer and resumption of [organization-defined information system operations] for essential missions/business functions within [organization-defined time period consistent with recovery time and recovery point objectives] when the primary processing capabilities are unavailable; b: Ensures that equipment and supplies required to transfer and resume operations are available at the alternate processing site or contracts are in place to support delivery to the site within the organization-defined time period for transfer/resumption; and c: Ensures that the alternate processing site provides information security safeguards equivalent to those of the primary site.

Control

Description

CP-2

The organization:

a: Develops a contingency plan for the information system that:
- 1: Identifies essential missions and business functions and associated contingency requirements;
- 2: Provides recovery objectives, restoration priorities, and metrics;
- 3: Addresses contingency roles, responsibilities, assigned individuals with contact information;
- 4: Addresses maintaining essential missions and business functions despite an information system disruption, compromise, or failure;
- 5: Addresses eventual, full information system restoration without deterioration of the security safeguards originally planned and implemented; and
- 6: Is reviewed and approved by [organization-defined personnel or roles];

b: Distributes copies of the contingency plan to [organization-defined key contingency personnel (identified by name and/or by role) and organizational elements];

c: Coordinates contingency planning activities with incident handling activities;

d: Reviews the contingency plan for the information system [organization-defined frequency];

e: Updates the contingency plan to address changes to the organization, information system, or environment of operation and problems encountered during contingency plan implementation, execution, or testing;

f: Communicates contingency plan changes to [organization-defined key contingency personnel (identified by name and/or by role) and organizational elements]; and

g: Protects the contingency plan from unauthorized disclosure and modification.

CP-7

The organization:

a: Establishes an alternate processing site including necessary agreements to permit the transfer and resumption of [organization-defined information system operations] for essential missions/business functions within [organization-defined time period consistent with recovery time and recovery point objectives] when the primary processing capabilities are unavailable;

b: Ensures that equipment and supplies required to transfer and resume operations are available at the alternate processing site or contracts are in place to support delivery to the site within the organization-defined time period for transfer/resumption; and

c: Ensures that the alternate processing site provides information security safeguards equivalent to those of the primary site.

Enhancements

The controls below (if any) add on to the requirements of PE-12.

Control	Description
PE-12(1)	The organization provides emergency lighting for all areas within the facility supporting essential missions and business functions.

Related CCIs

The CCIs below are tied to PE-12.

CCI	Definition
CCI-000963	Employ and maintains automatic emergency lighting for the information system that activates in the event of a power outage or disruption and that covers emergency exits and evacuation routes within the facility.