BRACKETOLOGY | FEDRAMP

PE-14: TEMPERATURE AND HUMIDITY CONTROLS

>
  • FedRAMP Baseline Membership PE-14:
  • LOW
  • MODERATE
  • HIGH
FedRAMP Bracketology

Use the FedRAMP Control Membership information above to determine if a control or control enhancement is required for each Impact Baseline — LOW, MODERATE, or HIGH

Click on the panel below each control or control enhancement to review the FedRAMP Impact Baseline-specific control configuration requirements for each of the [BRACKETS] in each control and/or control enhancement.

Review and use Additional Requirements and Guidance to build FedRAMP-compliant controls for your risk-based cybersecurity program.

To change the baseline view in the panel, click on LOW, MODERATE, or HIGH when the panel is open

Panels only appear where there are [BRACKETS] in the control or enhancement or where there is FedRAMP-specific requirements or guidance available.

The organization:

    • a. Maintains temperature and humidity levels within the facility where the information system resides at [Assignment: organization-defined acceptable levels]; and
    • b. Monitors temperature and humidity levels [Assignment: organization-defined frequency].
Click Low | Moderate | High below to see FedRAMP control configuration information. It's in BOLD.

The organization:

  • a. Maintains temperature and humidity levels within the facility where the information system resides at consistent with American Society of Heating, Refrigerating and Air-conditioning Engineers (ASHRAE) document entitled "Thermal Guidelines for Data Processing Environments; and
  • b. Monitors temperature and humidity levels continuously.

FedRAMP REQUIREMENT:

The service provider measures temperature at server inlets and humidity levels by dew point.

The organization:

  • a. Maintains temperature and humidity levels within the facility where the information system resides at consistent with American Society of Heating, Refrigerating and Air-conditioning Engineers (ASHRAE) document entitled "Thermal Guidelines for Data Processing Environments; and
  • b. Monitors temperature and humidity levels continuously.

FedRAMP REQUIREMENT:

The service provider measures temperature at server inlets and humidity levels by dew point.

The organization:

  • a. Maintains temperature and humidity levels within the facility where the information system resides at consistent with American Society of Heating, Refrigerating and Air-conditioning Engineers (ASHRAE) document entitled "Thermal Guidelines for Data Processing Environments; and
  • b. Monitors temperature and humidity levels continuously.

FedRAMP REQUIREMENT:

The service provider measures temperature at server inlets and humidity levels by dew point.

SUPPLEMENTAL GUIDANCE

This control applies primarily to facilities containing concentrations of information system resources, for example, data centers, server rooms, and mainframe computer rooms.

CONTROL ENHANCEMENTS

PE-14 (1) TEMPERATURE AND HUMIDITY CONTROLS | AUTOMATIC CONTROLS

The organization employs automatic temperature and humidity controls in the facility to prevent fluctuations potentially harmful to the information system.

Supplemental Guidance: NONE

PE-14 (2) TEMPERATURE AND HUMIDITY CONTROLS | MONITORING WITH ALARMS / NOTIFICATIONS
  • FedRAMP Baseline Membership PE-14 (2):
  • MODERATE
  • HIGH

The organization employs temperature and humidity monitoring that provides an alarm or notification of changes potentially harmful to personnel or equipment.

Supplemental Guidance: NONE

REFERENCES:

  • NO REFERENCES