Back

Verify the organization has Emergency Power Supplies available for the systems.


CONTROL ID
01912
CONTROL TYPE
Systems Continuity
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain system hardening procedures., CC ID: 12001

This Control has the following implementation support Control(s):
  • Verify enough emergency power is available for a graceful shutdown if the primary power system fails., CC ID: 01913
  • Verify emergency power continuity procedures are in place to transfer power to a secondary source if the primary power system fails., CC ID: 01914
  • Enable or disable the Uninterruptible Power Supply service, as appropriate., CC ID: 06037


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • It is recommended to confirm the facilities, equipment, terminals, etc. that can be used when the private power generation facility, etc. is activated in an emergency. Also, it is recommended to check the amount of electricity required by them at the time of addition, renewal, etc. of each device. (F109.3., FISC Security Guidelines on Computer Systems for Financial Institutions, Ninth Edition, Revised March 2020)
  • An Uninterruptible Power Supply (UPS) should be installed to protect the server in case of a power failure. (§ 1.12, The Center for Internet Security Open Enterprise Server: NetWare (v1) Consensus Baseline Security Settings Benchmark, 1)
  • Physical Security. An organization should combine the identification of the environment with safeguards which deal with physical protection. The following items may apply to buildings, secure areas, computer rooms and offices. The safeguard selection depends on which part of the building is consider… (¶ 8.1.7(6), ISO 13335-4 Information technology - Guidelines for the management of IT Security - Part 4: Selection of safeguards, 2000)
  • The organization must ensure that an alternate power source for the system exists. (§ 8-601, NISPOM - National Industrial Security Program Operating Manual (DoD 5220.22-M) February 26, 2006, February 28, 2006)