PE-13 (3) Fire Protection | Automatic (M) (H)

NIST 800-53 (r4) Control

The organization employs an automatic fire suppression capability for the information system when the facility is not staffed on a continuous basis.

NIST 800-53 (r5) Discussion

n/a

38North Guidance:

Meets Minimum Requirement:

• Document if this condition applies.

• For facilities that are not continuously staffed, employ an automatic fire suppression capability.

Best Practice:

• Do not use sprinkler-based systems for automatic fire suppression in server rooms. Instead use a clean agent type suppression system.

• Provide an on call system for personnel expected to respond to alerts that a fire suppression capability has been activated.

Unofficial FedRAMP Guidance:

• TBD

Assessment Evidence:

• Review documentation to assess if this control applies.

• Inspect automatic fire suppression system.

• Records of fire suppression testing

CSP Implementation Tips:

• AWS: Fully inherited.

• Azure: Fully inherited.

• GCP: Fully inherited.