# PE-10 Emergency Shutoff

NIST SP 800-53 control. Family: PE Physical and Environmental Protection. Function: preventative. Baselines: moderate, high. Mapping licence: CC BY-SA 4.0.

Statement: a. Provide the capability of shutting off power to [Assignment: organization-defined system or individual system components] in emergency situations; b. Place emergency shutoff switches or devices in [Assignment: organization-defined location by system or system component] to facilitate access for authorized personnel; and c. Protect emergency power shutoff capability from unauthorized activation.
Guidance: Emergency power shutoff primarily applies to organizational facilities that contain concentrations of system resources, including data centers, mainframe computer rooms, server rooms, and areas with computer-controlled machinery.

## Enhancements (none current)
Withdrawn by NIST: PE-10(01) (now in PE-10).

## Patterns that use it (1)
- Standard (1): SP-002 Server Module

## Clauses by framework (40 frameworks)
- iso_27001_2022: A.7.5, A.7.11. OSA's own, not in NIST's crosswalk: A.7.5
- iso_27002_2022: 7.5, 7.11
- cobit_2019: DSS01, DSS05
- nist_csf_2: PR.IR-02
- soc2_tsc: A1.2
- bsi_grundschutz: INF.1, INF.2
- anssi: Hygiene.38, SecNumCloud.12.3
- osfi_b13: B-13.2.6
- finma_circular: IV.E(89)
- bio2: 7.5, 7.11
- rbi_csf: Annex1.3, ITGRCA.18
- fisc: FISC.F2
- hkma_tme1: TME1.5.1
- dnb_good_practice: DNB.18.1
- cbb_tm: TM-10
- nca_ecc: 1-11
- qatar_nia: PS
- sama_csf: 3.7
- uae_ia: T6
- bog_cisd: CISD-XIV
- bom_ctrm: 3.5
- cbe_csf: CTO-10
- cbn_csf: Part10
- sa_js2: JS2-PE
- bot_cyber: Ch2.8
- cpmi_pfmi: PFMI.P17
- eba_ict: 3.4.3
- ecb_croe: CROE.2.3.6
- ffiec_is: II.C.8
- hipaa_sr: §164.308(a)(7)(ii)(C), §164.310(a)(2)(i)
- iosco_cyber: PROT-5
- sebi_cscrf: PR.PE
- cmmc_2: PE
- isae_3402: Clause 4
- hitrust_csf: 08.b
- lloyds_ms: PHYS.1
- solvency_ii: EIOPA-ICT-4.5
- csa_ccm_v4: DCS-14
- csa_aicm: DCS-14
- ccss_v9: 1.03.3
OSA's mapping for iso_27001_2022 and nist_csf_2 takes NIST's published crosswalk as its base. A clause not marked as OSA's own is in that crosswalk.

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/PE-10
- Clauses only: /api/v1/controls/PE-10?fields=mappings
- Page for people: /controls/pe-10/