NIST SP 800-53 Rev 5
PE - Physical and Environmental Protection

NIST SP 800-53 Rev 5 NIST800-PE-14: PE-14 Environmental Controls

a. Maintain [Selection (one or more): temperature; humidity; pressure; radiation; [Assignment: organization-defined environmental control]] levels within the facility where the system resides at [Assignment: organization-defined acceptable levels]; and b. Monitor environmental control levels [Assignment: organization-defined frequency].

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 48 controls across 33 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST Cybersecurity Framework 2.0 · 3 controls

  • NIST-CSF-DE.CM-02 The physical environment is monitored to find potentially adverse events
  • NIST-CSF-PR.AA-06 Physical access to assets is managed, monitored, and enforced commensurate with risk
  • NIST-CSF-PR.IR-02 The organization's technology assets are protected from environmental threats

HIPAA Security Rule · 2 controls

ISO 27001:2022 · 2 controls

  • 7.11 Supporting utilities
  • 7.5 Protecting against physical and environmental threats

ISO 27002:2022 · 2 controls

  • 7.11 Supporting utilities
  • 7.5 Protecting against physical and environmental threats

ISO/IEC 27011:2024 · 2 controls

  • 27011-7.1 Physical security perimeters
  • 27011-7.3 Equipment protection

NIST SP 800-66 Rev 2 · 2 controls

SOC 2 · 2 controls

  • SOC2-A1.2 A1.2 Environmental protection, backup and recovery infrastructure
  • SOC2-CC6.1 CC6.1 Logical access security over protected information assets

UK Security and Emergency Measures Direction (SEMD) - Water Industry · 2 controls

  • SEMD-PS-1 Critical Infrastructure Protection
  • SEMD-PS-2 Site Security Measures

21 CFR Part 58 - Good Laboratory Practice (GLP) · 1 control

  • 58.43 Animal Care Facilities

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

  • AWWA-2.4 Physical Access Controls

Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018) · 1 control

  • AT-DSG-6 Sections 12-13 - Image processing (video surveillance/CCTV)

C5 (Germany) · 1 control

  • C5-PS-07 Surveillance of operational and environmental parameters

CFTC System Safeguards (17 CFR 37, 38, 39, 49) · 1 control

  • CFTC-SS-6 Physical Security and Environmental Controls Category

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

FBI CJIS Security Policy · 1 control

  • CJIS-14 Physical Protection

FedRAMP High · 1 control

  • PE-14 Environmental Controls

FedRAMP Moderate · 1 control

  • PE-14 Environmental Controls

IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1) · 1 control

ISO 27701:2019 · 1 control

  • 6.8 Physical and environmental security

ISO 28001:2007 Supply Chain Security Management · 1 control

  • ISO28001-PS-01 Facility Security

ISO/IEC 27010:2015 · 1 control

  • 27010-11.1 Physical Protection

ISO/IEC 27400:2022 · 1 control

  • 27400-5.2 IoT Risk Assessment

NIST Privacy Framework · 1 control

  • NISTPF-5 Protect-P Access Control (PR.AC-P)

NIST SP 800-53 Rev 5 HIGH · 1 control

  • PE-14 PE-14 Environmental Controls

NIST SP 800-53 Rev 5 LOW · 1 control

  • PE-14 PE-14 Environmental Controls

NIST SP 800-53 Rev 5 MODERATE · 1 control

  • PE-14 PE-14 Environmental Controls

NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security · 1 control

  • NISTSP82-4 OT Access Control, Identity, Authentication, and Remote Access

SOC for Cybersecurity - Cybersecurity Risk Management Examination · 1 control

  • SOC-CY-S1 Logical and Physical Access Controls

SSAE 18 - Attestation Standards (SOC Reporting) · 1 control

  • SSAE18-CC6.4 CC6.4 - Physical Access Restrictions

Security of Critical Infrastructure Act 2018 (SOCI) · 1 control

  • SOCI-CIRMP-PHYSICAL CIRMP hazard vector: Physical security and natural hazards

Space ISAC (Information Sharing and Analysis Center) - Threat Framework · 1 control

  • GT-2 Physical Security Threats

TISAX - Trusted Information Security Assessment Exchange · 1 control

UK Gambling Commission LCCP and Remote Technical Standards · 1 control

  • UKGAMBLE-4 Resilience and Incident Response

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in PE - Physical and Environmental Protection

You are reading one control. How much of NIST SP 800-53 Rev 5 have you already done?

NIST SP 800-53 Rev 5 NIST800-PE-14 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of NIST SP 800-53 Rev 5 your existing evidence covers. Hold ISO 27001:2022 and 163 of 1014 NIST SP 800-53 Rev 5 controls already carry evidence.

If you hold ISO 27001:202216.1% covered · 851 gapsIf you hold ISO 27002:202210.8% covered · 904 gapsIf you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.110.2% covered · 911 gapsIf you hold CIS Controls v810.1% covered · 912 gapsIf you hold NIST SP 800-171 Rev 310.1% covered · 912 gapsIf you hold C5 (Germany)9.6% covered · 917 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 342 were rejected on the ISO 27001:2022 pair alone.

See the released pairs, $299 eachBrowse the graph free

Query this from an agent

The graph holds this control, the 48 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-53 Rev 5 controls