Applicable

(Y)es / (N)o

(C)onfidentiality

(I)ntegrity

(A)vailability

RPN

(C+I+A)

(S)atisfactory

L1

M2

H3

L1

M2

H3

L1

M2

H3

(O)ther than satisfactory +##

pe-14(2)

temperature and humidity controls  | monitoring with alarms / notifications

assessment objective:

Determine if the organization:  

pe-14(2)[1]  

employs temperature monitoring that provides an alarm of changes potentially harmful to personnel or equipment; and/or

pe-14(2)[2]  

employs temperature monitoring that provides notification of changes potentially harmful to personnel or equipment;

pe-14(2)[3]  

employs humidity monitoring that provides an alarm of changes potentially harmful to personnel or equipment; and/or

pe-14(2)[4]  

employs humidity monitoring that provides notification of changes potentially harmful to personnel or equipment.

potential assessment methods and objects:

Examine: [select from: Physical and environmental protection policy; procedures addressing temperature and humidity monitoring; facility housing the information system; logs or records of temperature and humidity monitoring; records of changes to temperature and humidity levels that generate alarms or notifications; other relevant documents or records].

Interview: [select from: Organizational personnel with responsibilities for information system environmental controls; organizational personnel with information security responsibilities].

Test: [select from: Automated mechanisms supporting and/or implementing temperature and humidity monitoring].