Applicable

(Y)es / (N)o

(C)onfidentiality

(I)ntegrity

(A)vailability

RPN

(C+I+A)

(S)atisfactory

L1

M2

H3

L1

M2

H3

L1

M2

H3

(O)ther than satisfactory +##

pe-15(1)

water damage protection  | automation support

assessment objective:

Determine if the organization:  

pe-15(1)[1]  

defines personnel or roles to be alerted when the presence of water is detected in the vicinity of the information system;

pe-15(1)[2]  

employs automated mechanisms to detect the presence of water in the vicinity of the information system; and

pe-15(1)[3]  

alerts organization-defined personnel or roles when the presence of water is detected in the vicinity of the information system.

potential assessment methods and objects:

Examine: [select from: Physical and environmental protection policy; procedures addressing water damage protection; facility housing the information system; automated mechanisms for water shutoff valves; automated mechanisms detecting presence of water in vicinity of information system; alerts/notifications of water detection in information system facility; other relevant documents or records].

Interview: [select from: Organizational personnel with responsibilities for information system environmental controls; organizational personnel with information security responsibilities].

Test: [select from: Automated mechanisms supporting and/or implementing water detection capability and alerts for the information system].