PE-12 EMERGENCY LIGHTING Applicability: All Information Systems Control: The organization employs and maintains automatic emergency lighting for the information system that activates in the event of a power outage or disruption and that covers emergency exits and evacuation routes within the facility. Supplemental Guidance: This control, to include any enhancements specified, may be satisfied by similar requirements fulfilled by another organizational entity than the information security program. Organizations avoid duplicating actions already covered. Control Enhancements: None Mandated. References: None. Priority and Baseline Allocation: P1 LOW PE-12 MOD PE-12 HIGH PE-12 PE-13 FIRE PROTECTION Applicability: All Information Systems Control: The organization employs and maintains fire suppression and detection devices/systems for the information system that are supported by an independent energy source. Supplemental Guidance: Fire suppression and detection devices/systems include, for example, sprinkler systems, handheld fire extinguishers, fixed fire hoses, and smoke detectors. This control, to include any enhancements specified, may be satisfied by similar requirements fulfilled by another organizational entity other than the information security program. Organizations avoid duplicating actions already covered. Control Enhancements: The organization employs fire detection devices/systems for the information system that activate automatically and notify the organization and emergency responders in the event of a fire. The organization employs fire suppression devices/systems for the information system that provide automatic notification of any activation to the organization and emergency responders. The organization employs an automatic fire suppression capability for the information system when the facility is not staffed on a continuous basis. References: None. Priority and Baseline Allocation:
PE-12 EMERGENCY LIGHTING Applicability: All Information Systems Control: The organization employs and maintains automatic emergency lighting for the information system that activates in the event of a power outage or disruption and that covers emergency exits and evacuation routes within the facility. Supplemental Guidance: This control, to include any enhancements specified, may be satisfied by similar requirements fulfilled by another organizational entity than the information security program. Organizations avoid duplicating actions already covered. Control Enhancements: None Mandated. References: None. Priority and Baseline Allocation: P1 LOW PE-12 MOD PE-12 HIGH PE-12 PE-13 FIRE PROTECTION Applicability: All Information Systems Control: The organization employs and maintains fire suppression and detection devices/systems for the information system that are supported by an independent energy source. Supplemental Guidance: Fire suppression and detection devices/systems include, for example, sprinkler systems, handheld fire extinguishers, fixed fire hoses, and smoke detectors. This control, to include any enhancements specified, may be satisfied by similar requirements fulfilled by another organizational entity other than the information security program. Organizations avoid duplicating actions already covered. Control Enhancements: The organization employs fire detection devices/systems for the information system that activate automatically and notify the organization and emergency responders in the event of a fire. The organization employs fire suppression devices/systems for the information system that provide automatic notification of any activation to the organization and emergency responders. The organization employs an automatic fire suppression capability for the information system when the facility is not staffed on a continuous basis. References: None. Priority and Baseline Allocation:
attachment_1_-_physical_and_environmental_protection_v1.1.docx