Facilities, power and communications equipment included, are run in keeping with applicable law and regulation, technical and business needs, vendor specifications and health and safety guidance: the need to protect facilities from power fluctuations and outages is examined alongside continuity needs, and suitable uninterruptible and alternative power is acquired; UPS arrangements are tested regularly to confirm that switchover happens without a significant effect on operations; utilities that facilities depend on come from at least two sources, entering through physically separate points; external cabling runs underground or is otherwise protected, internal cabling is protected by secured conduits, and entry to wiring closets is restricted; cabling and patching are structured and documented; staff are trained in health and safety law and take part in fire and rescue drills; sites and equipment are maintained by authorised staff at the intervals the supplier recommends; high-availability systems are analysed for redundant and fail-over cabling; continued compliance with health and safety law, guidance and vendor specifications is ensured; facilities incidents are logged, managed and resolved through incident management, with incidents that must be disclosed reported; and any physical change to a site is analysed so that environmental risk is reassessed.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.