Menu
Protect the system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible, working properly, and
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
| name | PE-15_water-damage-protection |
| description | Protect the system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible, working properly, and |
| category | configuration |
| version | 5.2.0 |
| author | cyberstrike-official |
| tags | ["nist","sp800-53","rev5","pe-15","pe"] |
| tech_stack | ["any"] |
| cwe_ids | [] |
| chains_with | ["AT-3","PE-10"] |
| prerequisites | [] |
| severity_boost | {"AT-3":"Chain with AT-3 for comprehensive security coverage","PE-10":"Chain with PE-10 for comprehensive security coverage"} |
Family: Physical and Environmental Protection (PE) Framework: NIST SP 800-53 Rev 5
The provision of water damage protection primarily applies to organizational facilities that contain concentrations of system resources, including data centers, server rooms, and mainframe computer rooms. Isolation valves can be employed in addition to or in lieu of master shutoff valves to shut off water supplies in specific areas of concern without affecting entire organizations.
Examine the System Security Plan (SSP) and related artifacts for PE-15 implementation details. Verify the organization has documented how this control is satisfied.
# For cloud environments, use cloud-audit-mcp tools
# For on-premises, review system configurations directly
# Example: Check if account management policies exist
grep -r "account.management\|access.control" /etc/security/ 2>/dev/null
Verify the control is actively functioning, not just documented. Check logs, configurations, and operational evidence.
| Tool | Purpose | Usage |
|---|---|---|
| Manual Review | Documentation and interview-based | N/A |
Protect the system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible, working properly, and known to key personnel.
The provision of water damage protection primarily applies to organizational facilities that contain concentrations of system resources, including data centers, server rooms, and mainframe computer rooms. Isolation valves can be employed in addition to or in lieu of master shutoff valves to shut off water supplies in specific areas of concern without affecting entire organizations.
| Finding | Severity | Impact |
|---|---|---|
| PE-15 Water Damage Protection not implemented | Medium | Physical and Environmental Protection |
| PE-15 partially implemented | Low | Incomplete Physical and Environmental Protection |
| CWE ID | Title |
|---|---|
| N/A | No direct CWE mapping |
eBPF-based post-exploitation for kernel-level credential harvesting, process hiding, and traffic interception on Linux
AWS post-exploitation for IAM privilege escalation, data exfiltration, persistence, and operational security via boto3
Azure/Entra ID post-exploitation for tenant compromise, Key Vault extraction, managed identity abuse, and token manipulation
CI/CD pipeline attacks for secret extraction, pipeline injection, and supply chain compromise via GitHub/Jenkins/GitLab
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Based on SOC occupation classification
