PE-14: TEMPERATURE AND HUMIDITY CONTROLs

TAILORED FOR INDUSTRIAL CONTROL SYSTEMS

  • ICS Control Baselines:
  • Low
  • Moderate
  • High

The organization:

    • a. Maintains temperature and humidity levels within the facility where the information system resides at [Assignment: organization-defined acceptable levels]; and
    • b. Monitors temperature and humidity levels [Assignment: organization-defined frequency].

SUPPLEMENTAL GUIDANCE

This control applies primarily to facilities containing concentrations of information system resources, for example, data centers, server rooms, and mainframe computer rooms.

ICS SUPPLEMENTAL GUIDANCE

Temperature and humidity controls are typically components of other ICS systems such as the HVAC, process, or lighting systems, or can be a standalone and unique ICS system. ICS can operate in extreme environments and both interior and exterior locations. For a specific ICS, the temperature and humidity design and operational parameters dictate the performance specifications. As ICS and IS become interconnected and the network provides connectivity across the hybrid domain, power circuits, distribution closets, routers and switches that support fire protection and life safety systems must be maintained at the proper temperature and humidity.

CONTROL ENHANCEMENTS

PE-14 (1) TEMPERATURE AND HUMIDITY CONTROLS | AUTOMATIC CONTROLS

NOT SELECTED FOR THE NIST ISC CONTROL SET

The organization employs automatic temperature and humidity controls in the facility to prevent fluctuations potentially harmful to the information system.

Supplemental Guidance: NONE

PE-14 (2) TEMPERATURE AND HUMIDITY CONTROLS | MONITORING WITH ALARMS / NOTIFICATIONS

NOT SELECTED FOR THE NIST ISC CONTROL SET

The organization employs temperature and humidity monitoring that provides an alarm or notification of changes potentially harmful to personnel or equipment.

Supplemental Guidance: NONE

REFERENCES:

  • NIST Special Publication 800-82 | GUIDE TO INDUSTRIAL CONTROL SYSTEMS (ICS) SECURITY