Navigate

PE-15

PE-15: Water Damage Protection

The organization protects the information system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible, working properly, and known to key personnel.

Supplemental

This control applies primarily to facilities containing concentrations of information system resources including, for example, data centers, server rooms, and mainframe computer rooms. Isolation valves can be employed in addition to or in lieu of master shutoff valves to shut off water supplies in specific areas of concern, without affecting entire organizations.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	low

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to PE-15.

Control	Description
AT-3	The organization provides role-based security training to personnel with assigned security roles and responsibilities: AT-3a.: Before authorizing access to the information system or performing assigned duties; AT-3b.: When required by information system changes; and AT-3c.: [Assignment: organization-defined frequency] thereafter.

Enhancements

The controls below (if any) add on to the requirements of PE-15.

Control	Description
PE-15 (1)	The organization employs automated mechanisms to detect the presence of water in the vicinity of the information system and alerts [Assignment: organization-defined personnel or roles].

Related CCIs

The CCIs below are tied to PE-15.

CCI	Definition
CCI-000977	The organization protects the information system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible.
CCI-000978	The organization protects the information system from damage resulting from water leakage by providing master shutoff or isolation valves that are working properly.
CCI-000979	Key personnel have knowledge of the master water shutoff or isolation valves.