PE-15 Water damage protection
Requires protection against water leakage damage through master shutoff or isolation valves that can be reached, are proven to work, and whose location is known to the personnel who would have to operate them.
4
artefacts
1
held by a system
2
at each review
moderate
to go live
Physical access / facilities
where the evidence lives
teal = a system already holds it · olive = produced at each review
system holds itEvidence a system already holds
- Water detection sensor placement and alerting configuration where used · Physical access / facilities
periodic reviewEvidence produced at each review
- Inspection or test records confirming valves operate · Physical access / facilities
- Evidence key personnel are identified and know the valve locations · Physical access / facilities
governing documentDocuments that govern the control
- Documentation of shutoff or isolation valve locations serving the facility · Policy repository / GRC workspace
First move
Start with the 1 of 4 artefacts that already live in a system (Physical access / facilities); keep the periodic reviews but log each one as a dated record with a named reviewer.
Common gaps auditors find
- Valve locations known only to a building contractor who is not on call
- Valves seized through lack of exercise and never inspected
- No water detection under raised floors or near cooling equipment
Do this for your whole sheet
Paste the rows you run your controls from and get this mapping for every control at once, with the periodic-review ones flagged and a first move per row. No account for the first run.
Build my evidence sheetPE-14 Environmental controls · PE-16 Delivery and Removal. Authorize and control [organization-defined] entering and exiting the facility; and Maintain records of the system components