Information resource owners with responsibility over infrastructure equipment shall employ and maintain fire suppression and detection devices/systems for the information resource that are supported by an independent energy source.
External and/or environmental threats (e.g., fire, flood, earthquake, civil unrest) disrupt operations due to inadequate physical security controls.
The organization employs and maintains fire suppression and detection devices/systems for the information system that are supported by an independent energy source.
a. The organization deploys appropriate fire suppression equipment to protect organizational data centers, server rooms, and other areas containing information systems in the event of a fire.
b. The staff receives training in appropriate response in case of emergencies and use of fire suppression equipment.
Information resources shall be protected from environmental hazards. Designated employees shall be trained to monitor environmental control procedures and equipment and shall be trained in desired response in case of emergencies or equipment problems.
Obtain physical and environmental protection policy; procedures addressing fire protection; fire suppression and detection devices/systems; fire suppression and detection devices/systems documentation; test records of fire suppression and detection devices/systems; facility housing the information system; alarm service level agreements; facility staffing plans; other relevant documents or records and ascertain if :
(I)the organization employs and maintains fire suppression and detection devices/systems that can be activated in the event of a fire.
(ii)the organization employs fire detection devices/systems that, without manual intervention, notify the organization and emergency responders in the event of a fire.
(iii)the organization employs fire suppression devices/systems that provide automatic notification of any activation to the organization and emergency responders.
(iv)the organization employs an automatic fire suppression capability in facilities that are not staffed on a continuous basis.
