PE-23—Facility Location
>Control Description
a
Plan the location or site of the facility where the system resides considering physical and environmental hazards; and
b
For existing facilities, consider the physical and environmental hazards in the organizational risk management strategy.
>Cross-Framework Mappings
>Supplemental Guidance
Physical and environmental hazards include floods, fires, tornadoes, earthquakes, hurricanes, terrorism, vandalism, an electromagnetic pulse, electrical interference, and other forms of incoming electromagnetic radiation. The location of system components within the facility is addressed in PE-18.
>Related Controls
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What policies and procedures govern the implementation of facility location for the organization's facilities?
- •Who is responsible for overseeing and maintaining facility location controls?
- •How frequently are facility location controls reviewed and updated?
- •What process exists for granting exceptions to facility location requirements?
- •How does the organization ensure accountability for facility location across all facility locations?
Technical Implementation:
- •What technologies or systems technically implement facility location?
- •How are these systems configured to meet the control requirements?
- •What monitoring or alerting capabilities exist for facility location?
- •How do facility location systems integrate with other physical security infrastructure?
- •What redundancy or backup mechanisms support facility location?
Evidence & Documentation:
- •Provide documented policies and procedures for facility location.
- •Provide evidence of facility location implementation and configuration.
- •Provide logs, records, or reports demonstrating facility location activities over the past 90 days.
- •Provide testing, maintenance, or inspection records for facility location from the past year.
- •Provide evidence of facility location reviews, audits, or assessments.
Ask AI
Configure your API key to use AI features.