PS-05 Protection from fire and smoke
Protect buildings against fire and smoke with fire sections rated at least ninety minutes, early detection with automatic voltage release, an extinguishing or oxygen reduction system, alarm transmission to the local fire
4
artefacts
0
held by a system
2
at each review
hard
to go live
Policy repository / GRC workspace
where the evidence lives
teal = a system already holds it · olive = produced at each review
system holds itEvidence a system already holds
none for this control
periodic reviewEvidence produced at each review
- Transmission test record confirming alarm receipt by the local fire service · Physical access / facilities
- Attendance list and debrief notes from the most recent fire drill · Physical access / facilities
governing documentDocuments that govern the control
- Fire compartment plan with the certified resistance rating of each barrier · Policy repository / GRC workspace
- Commissioning certificate for the extinguishing or oxygen reduction installation · Policy repository / GRC workspace
First move
This control is evidenced by people and documents, not systems. Put the document under version control with an owner and review date, and log each review as a record with reviewer and date. Do not try to automate it.
Common gaps auditors find
- Cable and pipe penetrations through rated walls left unsealed after works
- Detection zones so coarse that one alert would shut power to an entire hall
- Extinguishing agent inspection overdue against the manufacturer interval
- Drills run for office staff only and never for data centre operations shifts
Do this for your whole sheet
Paste the rows you run your controls from and get this mapping for every control at once, with the periodic-review ones flagged and a first move per row. No account for the first run.
Build my evidence sheetPS-04 Physical site access control · PS-06 Protection against interruptions caused by power failures and other such risks