PE-13: FIRE PROTECTION
TAILORED FOR INDUSTRIAL CONTROL SYSTEMS
ICS Control Baselines:
- Low
- Moderate
- High
The organization employs and maintains fire suppression and detection devices/systems for the information system that are supported by an independent energy source.
SUPPLEMENTAL GUIDANCE
This control applies primarily to facilities containing concentrations of information system resources including, for example, data centers, server rooms, and mainframe computer rooms. Fire suppression and detection devices/systems include, for example, sprinkler systems, handheld fire extinguishers, fixed fire hoses, and smoke detectors.
ICS SUPPLEMENTAL GUIDANCE
Fire suppression mechanisms should take the ICS environment into account (e.g., water sprinkler systems could be hazardous in specific environments).
RELATED CONTROLS:
CONTROL ENHANCEMENTS
PE-13 (1) FIRE PROTECTION | DETECTION DEVICES / SYSTEMS
ISC Control Baseline:
- High
The organization employs fire detection devices/systems for the information system that activate automatically and notify [Assignment: organization-defined personnel or roles] and [Assignment: organization-defined emergency responders] in the event of a fire.
Supplemental Guidance:
Organizations can identify specific personnel, roles, and emergency responders in the event that individuals on the notification list must have appropriate access authorizations and/or clearances, for example, to obtain access to facilities where classified operations are taking place or where there are information systems containing classified information.
No ICS Supplemental Guidance.
PE-13 (2) FIRE PROTECTION | SUPPRESSION DEVICES/SYSTEMS
ISC Control Baseline:
- High
The organization employs fire suppression devices/systems for the information system that provide automatic notification of any activation to Assignment: organization-defined personnel or roles] and [Assignment: organization-defined emergency responders].
Supplemental Guidance:
Organizations can identify specific personnel, roles, and emergency responders in the event that individuals on the notification list must have appropriate access authorizations and/or clearances, for example, to obtain access to facilities where classified operations are taking place or where there are information systems containing classified information.
No ICS Supplemental Guidance.
PE-13 (3) FIRE PROTECTION | AUTOMATIC FIRE SUPPRESSION
ICS Control Baselines:
- Moderate
- High
The organization employs an automatic fire suppression capability for the information system when the facility is not staffed on a continuous basis.
Supplemental Guidance: NONE
No ICS Supplemental Guidance.
PE-13 (4) FIRE PROTECTION | INSPECTIONS
The organization ensures that the facility undergoes [Assignment: organization-defined frequency] inspections by authorized and qualified inspectors and resolves identified deficiencies within [Assignment: organization-defined time period].
Supplemental Guidance: NONE
NOT SELECTED FOR THE NIST ISC CONTROL SET
REFERENCES:
- NIST Special Publication 800-82 | GUIDE TO INDUSTRIAL CONTROL SYSTEMS (ICS) SECURITY