PE-11 (1) Emergency Power | Long-Term Alternate Power Supply - Minimal Operational Capability (H)

NIST 800-53 (r4) Control

The organization provides a long-term alternate power supply for the information system that is capable of maintaining minimally required operational capability in the event of an extended loss of the primary power source.

NIST 800-53 (r4) Supplemental Guidance

This control enhancement can be satisfied, for example, by the use of a secondary commercial power supply or other external power supply. Long-term alternate power supplies for the information system can be either manually or automatically activated.

NIST 800-53 (r5) Discussion

Provision of an alternate power supply with minimal operating capability can be satisfied by accessing a secondary commercial power supply or other external power supply.

38North Guidance:

Meets Minimum Requirement:

• Define and document minimally required operational capacity and duration.

• Understand and document the power load for minimally required operational capability.

• Understand and document the required duration and associated fuel requirements.

• Procure alternative power source and required fuel supplies.

Best Practice:

• Automated weekly generator exercises

• Monthly inspections of generators for fluid leaks

• Install multiple generators and associated parallel switch gear

Unofficial FedRAMP Guidance:

• TBD

Assessment Evidence:

• Review documentation describing power needs for long term operation.

• Interview personnel to understand generator use, testing and maintenance.

• Review supplies to validate that long-term operation is feasible.

• Records of maintenance and testing for generators

CSP Implementation Tips:

• AWS: Fully inherited

• Azure: Fully inherited

• GCP: Fully inherited