Navigate

PE-14

PE-14: Temperature and Humidity Controls

The organization:

a: Maintains temperature and humidity levels within the facility where the information system resides at [one of ]; and

b: Monitors temperature and humidity levels [one of ].

Supplemental

This control applies primarily to facilities containing concentrations of information system resources, for example, data centers, server rooms, and mainframe computer rooms.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	low

Overlays
None

CSF Categories
PR.IP-5

Related Controls

The controls below (if any) were marked by NIST as being related to PE-14.

Control	Description
AT-3	The organization provides role-based security training to personnel with assigned security roles and responsibilities: a: Before authorizing access to the information system or performing assigned duties; b: When required by information system changes; and c: [one of ] thereafter.

Enhancements

The controls below (if any) add on to the requirements of PE-14.

Control	Description
PE-14(1)	The organization employs automatic temperature and humidity controls in the facility to prevent fluctuations potentially harmful to the information system.
PE-14(2)	The organization employs temperature and humidity monitoring that provides an alarm or notification of changes potentially harmful to personnel or equipment.

Related CCIs

The CCIs below are tied to PE-14.

CCI	Definition
CCI-000971	Maintain temperature; humidity; pressure; radiation; and/or organization-defined environmental control levels within the facility where the system resides at organization-defined acceptable levels.
CCI-000972	Defines acceptable temperature, humidity, pressure, radiation, and/or organization-defined environmental control levels to be maintained within the facility where the system resides.
CCI-000973	Monitor environmental control levels in accordance with organization-defined frequency.
CCI-000974	Defines a frequency for monitoring environmental control levels.