{"data":{"id":"PE-09","name":"Power Equipment and Cabling","family":"PE","family_name":"Physical and Environmental Protection","withdrawn":false,"description":"Protect power equipment and power cabling for the system from damage and destruction.","supplemental_guidance":"Organizations determine the types of protection necessary for the power equipment and cabling employed at different locations that are both internal and external to organizational facilities and environments of operation. Types of power equipment and cabling include internal cabling and uninterruptable power sources in offices or data centers, generators and power cabling outside of buildings, and power sources for self-contained components such as satellites, vehicles, and other deployable systems.","enhancements":[{"id":"PE-09(01)","name":"Redundant Cabling","statement":"Employ redundant power cabling paths that are physically separated by [Assignment: organization-defined distance].","baselines":[]},{"id":"PE-09(02)","name":"Automatic Voltage Controls","statement":"Employ automatic voltage controls for [Assignment: organization-defined critical system components].","baselines":[]}],"baseline_low":false,"baseline_moderate":true,"baseline_high":true,"nist_800_53":{"rev5":{"id":"PE-09","name":"Power Equipment and Cabling","description":"Protect power equipment and power cabling for the system from damage and destruction.","discussion":"Organizations determine the types of protection necessary for the power equipment and cabling employed at different locations that are both internal and external to organizational facilities and environments of operation. Types of power equipment and cabling include internal cabling and uninterruptable power sources in offices or data centers, generators and power cabling outside of buildings, and power sources for self-contained components such as satellites, vehicles, and other deployable systems.","related_controls":["PE-04"],"baseline_low":false,"baseline_moderate":true,"baseline_high":true,"baseline_privacy":false,"new_in_rev5":false,"changes_from_rev4":""}},"compliance_mappings":{"iso_27001_2022":["A.7.5","A.7.8","A.7.11","A.7.12"],"iso_27002_2022":["7.5","7.11","7.12"],"cobit_2019":["DSS01","DSS05"],"pci_dss_v4":[],"nist_csf_2":["PR.IR-02"],"cis_controls_v8":[],"soc2_tsc":["A1.2"],"finos_ccc":[],"iso_42001_2023":[],"iec_62443":[],"asd_e8":[],"nis2":[],"apra_cps_234":[],"mas_trm":[],"pra_op_resilience":[],"bsi_grundschutz":["INF.1","INF.2"],"anssi":["Hygiene.38","SecNumCloud.12.3"],"osfi_b13":["B-13.2.6"],"finma_circular":["IV.A(28)","IV.E(89)"],"gdpr":[],"dora":[],"bio2":["7.5","7.11","7.12"],"rbi_csf":["Annex1.3","ITGRCA.18"],"fisc":["FISC.F2"],"lgpd_bcb":[],"hkma_tme1":["TME1.5.1"],"mlps_2":["8.1.1.4","8.1.1.8"],"dnb_good_practice":["DNB.18.1","DNB.21.1"],"cra":[],"swift_cscf":[],"cbb_tm":["TM-10"],"nca_ecc":["1-11"],"qatar_nia":["PS"],"sama_csf":["3.7"],"uae_ia":["T6"],"bog_cisd":["CISD-XIV"],"bom_ctrm":["3.5"],"cbe_csf":["CTO-10"],"cbn_csf":["Part10"],"sa_js2":["JS2-PE"],"bot_cyber":["Ch2.8"],"cpmi_pfmi":["PFMI.P17"],"eba_ict":["3.4.3"],"ecb_croe":["CROE.2.3.6"],"ffiec_is":["II.C.8"],"iosco_cyber":["PROT-5"],"sebi_cscrf":["PR.PE"],"cmmc_2":["PE"],"nerc_cip":[],"nrc_73_54":["RG5.71-B-PE"],"tsa_psd":[],"ieee_1686":[],"ferc_cip":[],"doe_c2m2":[],"api_1164":["Sec 14"],"awia":[],"iaea_nss":[],"pci_pts":[],"fips_140":[],"cbest":[],"tiber_eu":[],"pci_hsm":["7"],"common_criteria":[],"isae_3402":["Clause 4"],"fca_sysc_13":[],"fda_21_cfr_11":[],"fda_cyber":[],"hitrust_csf":["08.b"],"iso_27799":["17.3"],"lloyds_ms":["PHYS.1"],"naic_ds":[],"nhs_dspt":[],"pra_ss1_23":[],"solvency_ii":["EIOPA-ICT-4.5"],"owasp_masvs_v2":[],"csa_ccm_v4":["DCS-12","DCS-14"],"csa_aicm":["DCS-12","DCS-14"],"ccss_v9":["1.03.3","1.03.7"],"mica":[],"basel_sco60":[],"bssc":[],"sec_custody_digital":[],"dpdpa":[]},"attack_techniques":[],"metadata":{"last_reviewed":"2026-10-03","review_notes":"2026-10-03: iso_27001_2022 A.7.8 added from NIST's SP 800-53 Rev 5 to ISO/IEC 27001:2022 crosswalk (OLIR entry 155), which OSA's mapping now takes as its base. 2026-10-03: baselines LMH to -MH, from NIST SP 800-53B Release 5.2.0.","mapping_status":"complete"},"function":"preventative","used_by_patterns":["SP-002"]}}