Control: The organization protects power equipment and power cabling for the information system from damage and destruction.
Supplemental Guidance: Organizations determine the types of protection necessary for power equipment and cabling employed at different locations both internal and external to organizational facilities and environments of operation. This includes, for example, generators and power cabling outside of buildings, internal cabling and uninterruptable power sources within an office or data center, and power sources for self-contained entities such as vehicles and satellites. Related control: PE-4.
The organization employs redundant power cabling paths that are physically separated by [Assignment: organization-defined distance].
Supplemental Guidance: Physically separate, redundant power cables help to ensure that power continues to flow in the event one of the cables is cut or otherwise damaged.
power equipment and cabling | automatic voltage controls
The organization employs automatic voltage controls for [Assignment: organization-defined critical information system components].
Provides the capability of shutting off power to the information system or individual system components in emergency situations;
Places emergency shutoff switches or devices in [Assignment: organization-defined location by information system or system component] to facilitate safe and easy access for personnel; and
Protects emergency power shutoff capability from unauthorized activation.
Supplemental Guidance: This control applies primarily to facilities containing concentrations of information system resources including, for example, data centers, server rooms, and mainframe computer rooms. Related control: PE-15.
Control: The organization provides a short-term uninterruptible power supply to facilitate [Selection (one or more): an orderly shutdown of the information system; transition of the information system to long-term alternate power] in the event of a primary power source loss.
Supplemental Guidance: Related controls: AT-3, CP-2, CP-7.
Control Enhancements:
emergency power | long-term alternate power supply - minimal operational capability
The organization provides a long-term alternate power supply for the information system that is capable of maintaining minimally required operational capability in the event of an extended loss of the primary power source.
Supplemental Guidance: This control enhancement can be satisfied, for example, by the use of a secondary commercial power supply or other external power supply. Long-term alternate power supplies for the information system can be either manually or automatically activated.
emergency power | long-term alternate power supply - self-contained
The organization provides a long-term alternate power supply for the information system that is:
Self-contained;
Not reliant on external power generation; and
Capable of maintaining [Selection: minimally required operational capability; full operational capability] in the event of an extended loss of the primary power source.
Supplemental Guidance: This control enhancement can be satisfied, for example, by the use of one or more generators with sufficient capacity to meet the needs of the organization. Long-term alternate power supplies for organizational information systems are either manually or automatically activated.