# PE-14 Environmental Controls

NIST SP 800-53 control. Family: PE Physical and Environmental Protection. Function: preventative. Baselines: low, moderate, high. Mapping licence: CC BY-SA 4.0.

Statement: a. Maintain [Selection (one or more): temperature; humidity; pressure; radiation; [Assignment: organization-defined environmental control]] levels within the facility where the system resides at [Assignment: organization-defined acceptable levels]; and b. Monitor environmental control levels [Assignment: organization-defined frequency].
Guidance: The provision of environmental controls applies primarily to organizational facilities that contain concentrations of system resources (e.g., data centers, mainframe computer rooms, and server rooms). Insufficient environmental controls, especially in very harsh environments, can have a significant adverse impact on the availability of systems and system components that are needed to support organizational mission and business functions.

## Enhancements (2)
- PE-14(01) Automatic Controls
- PE-14(02) Monitoring with Alarms and Notifications
Each enhancement's statement: /api/v1/controls/PE-14?fields=enhancements

## Patterns that use it (1)
- Important (1): SP-002 Server Module

## Clauses by framework (43 frameworks)
- iso_27001_2022: A.7.5, A.7.8, A.7.11
- iso_27002_2022: 7.5, 7.8
- cobit_2019: DSS01, DSS05
- nist_csf_2: PR.IR-02
- soc2_tsc: A1.2, A1.2-POF2
- bsi_grundschutz: INF.1, INF.2
- anssi: Hygiene.38, SecNumCloud.12.3
- osfi_b13: B-13.2.6
- finma_circular: IV.A(28), IV.E(89)
- bio2: 7.5, 7.8
- rbi_csf: Annex1.3, ITGRCA.18
- fisc: FISC.F2
- hkma_tme1: TME1.5.1
- mlps_2: 8.1.1.7
- cbb_tm: TM-10
- nca_ecc: 1-11
- qatar_nia: PS
- sama_csf: 3.7
- uae_ia: T6
- bog_cisd: CISD-XIV
- bom_ctrm: 3.5
- cbe_csf: CTO-10
- cbn_csf: Part10
- sa_js2: JS2-PE
- bot_cyber: Ch2.8
- cpmi_pfmi: PFMI.P17
- eba_ict: 3.4.3
- ecb_croe: CROE.2.3.6
- ffiec_is: II.C.8
- iosco_cyber: PROT-5
- sebi_cscrf: PR.PE
- cmmc_2: PE
- nrc_73_54: RG5.71-B-PE
- isae_3402: Clause 4
- hitrust_csf: 08.b, 09.b
- iso_27799: 11.2
- lloyds_ms: PHYS.1
- solvency_ii: EIOPA-ICT-4.5
- csa_ccm_v4: DCS-13
- csa_aicm: DCS-13
- ccss_v9: 1.03.3, 1.03.7
- basel_sco60: SCO60.53
- bssc: NOS-09
OSA's mapping for iso_27001_2022 and nist_csf_2 takes NIST's published crosswalk as its base. A clause not marked as OSA's own is in that crosswalk.

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/PE-14
- Clauses only: /api/v1/controls/PE-14?fields=mappings
- Page for people: /controls/pe-14/