Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-30988 | EC-04.03.01 | SV-41032r2_rule | PETN-1 | Low |
Description |
---|
If employees have not received training on the environmental controls they will not be able to respond to a fluctuation of environmental conditions, which could damage equipment and ultimately disrupt operations. |
STIG | Date |
---|---|
Traditional Security | 2013-07-11 |
Check Text ( C-39653r4_chk ) |
---|
Check training records to ensure that all required personnel have received their initial and periodic (minimum annually) environmental control training (specifically humidity/temperature). Ask personnel how they respond to an environmental alarm. NOTES: This requirement should not be applied to a tactical environment, unless it is a fixed computer facility supporting missions in a Theater of Operations. The standards to be applied for applicability in a tactical environment are: 1) The facility containing the computer room has been in operation over 1-year. 2) The facility is "fixed facility" - a hard building made from normal construction materials - wood, steel, brick, stone, mortar, etc. |
Fix Text (F-34798r6_fix) |
---|
1. All required personnel involved with Information Technology (IT) area/computer rooms must receive initial and periodic (minimum annually) environmental control training (specifically regarding humidity/temperature controls). 2. Training records must be updated to reflect this special training. |