PE-11—Emergency Power
>Control Description
>DoD Impact Level Requirements
No specific parameter values or requirements for this impact level.
>Discussion
An uninterruptible power supply (UPS) is an electrical system or mechanism that provides emergency power when there is a failure of the main power source. A UPS is typically used to protect computers, data centers, telecommunication equipment, or other electrical equipment where an unexpected power disruption could cause injuries, fatalities, serious mission or business disruption, or loss of data or information. A UPS differs from an emergency power system or backup generator in that the UPS provides near-instantaneous protection from unanticipated power interruptions from the main power source by providing energy stored in batteries, supercapacitors, or flywheels.
The battery duration of a UPS is relatively short but provides sufficient time to start a standby power source, such as a backup generator, or properly shut down the system.
>Related Controls
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What policies govern the use of alternate work sites for processing organizational information?
- •How does the organization assess and approve alternate work sites for security adequacy?
- •What is the process for providing security guidance and controls to personnel at alternate sites?
- •How are alternate work site security requirements communicated and enforced?
- •What governance exists for periodically reviewing and auditing alternate work site security?
Technical Implementation:
- •What technical controls are implemented at alternate work sites (VPN, encryption, endpoint protection)?
- •How are alternate work site endpoints configured and managed?
- •What remote access technologies are authorized for alternate work sites?
- •How is data protected when stored or processed at alternate work sites?
- •What monitoring capabilities exist for alternate work site security?
Evidence & Documentation:
- •Provide the list of approved alternate work sites and their security assessments.
- •Provide security guidance and requirements provided to alternate work site personnel.
- •Provide evidence of alternate work site security reviews and assessments.
- •Provide documentation of controls deployed at alternate work sites.
- •Provide records of alternate work site security incidents or issues.
Ask AI
Configure your API key to use AI features.