PE-13 (02)—Fire Protection | Suppression Systems -- Automatic Activation and Notification
Moderate
High
>Control Description
(a) Employ fire suppression systems that activate automatically and notify ⚙organization-defined personnel or roles and ⚙organization-defined emergency responders; and
(b) Employ an automatic fire suppression capability when the facility is not staffed on a continuous basis.
>FedRAMP Baseline Requirements
No FedRAMP-specific parameter values or requirements for this baseline.
>Discussion
Organizations can identify specific personnel, roles, and emergency responders if individuals on the notification list need to have appropriate access authorizations and/or clearances (e.g., to enter to facilities where access is restricted due to the impact level or classification of information within the facility). Notification mechanisms may require independent energy sources to ensure that the notification capability is not adversely affected by the fire.
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What policies and procedures govern the implementation of suppression systems -- automatic activation and notification for the organization's facilities?
- •Who is responsible for overseeing and maintaining suppression systems -- automatic activation and notification controls?
- •How frequently are suppression systems -- automatic activation and notification controls reviewed and updated?
- •What process exists for granting exceptions to suppression systems -- automatic activation and notification requirements?
- •How does the organization ensure accountability for suppression systems -- automatic activation and notification across all facility locations?
Technical Implementation:
- •What technologies or systems technically implement suppression systems -- automatic activation and notification?
- •How are these systems configured to meet the control requirements?
- •What monitoring or alerting capabilities exist for suppression systems -- automatic activation and notification?
- •How do suppression systems -- automatic activation and notification systems integrate with other physical security infrastructure?
- •What redundancy or backup mechanisms support suppression systems -- automatic activation and notification?
Evidence & Documentation:
- •Provide documented policies and procedures for suppression systems -- automatic activation and notification.
- •Provide evidence of suppression systems -- automatic activation and notification implementation and configuration.
- •Provide logs, records, or reports demonstrating suppression systems -- automatic activation and notification activities over the past 90 days.
- •Provide testing, maintenance, or inspection records for suppression systems -- automatic activation and notification from the past year.
- •Provide evidence of suppression systems -- automatic activation and notification reviews, audits, or assessments.
Ask AI
Configure your API key to use AI features.