PE-11 Emergency power
Requires an uninterruptible power supply able to support either an orderly system shutdown or a transition to longer term alternate power when the primary power source is lost.
4
artefacts
1
held by a system
1
at each review
moderate
to go live
Physical access / facilities
where the evidence lives
teal = a system already holds it · olive = produced at each review
system holds itEvidence a system already holds
- Evidence of automated orderly shutdown configuration where that option is used · Physical access / facilities
periodic reviewEvidence produced at each review
- Maintenance, battery replacement and load test records · Physical access / facilities
governing documentDocuments that govern the control
- Uninterruptible power supply specification and the runtime it provides · Policy repository / GRC workspace
- Documented choice between orderly shutdown and transition to alternate power · Policy repository / GRC workspace
First move
Start with the 1 of 4 artefacts that already live in a system (Physical access / facilities); keep the periodic reviews but log each one as a dated record with a named reviewer.
Common gaps auditors find
- Battery runtime no longer matches the load after equipment was added
- Units never load tested, so actual runtime is unknown
- Supply protects servers while network and cooling equipment is unprotected
Do this for your whole sheet
Paste the rows you run your controls from and get this mapping for every control at once, with the periodic-review ones flagged and a first move per row. No account for the first run.
Build my evidence sheet