| name | PE-14(1)_automatic-controls |
| description | Employ the following automatic environmental controls in the facility to prevent fluctuations potentially harmful to the system: [organization-defined |
| category | configuration |
| version | 5.2.0 |
| author | cyberstrike-official |
| tags | ["nist","sp800-53","rev5","pe-14-1","pe","enhancement"] |
| tech_stack | ["any"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | ["PE-14"] |
| severity_boost | {} |
PE-14(1) Automatic Controls
Enhancement of: PE-14
High-Level Description
Family: Physical and Environmental Protection (PE)
Framework: NIST SP 800-53 Rev 5
The implementation of automatic environmental controls provides an immediate response to environmental conditions that can damage, degrade, or destroy organizational systems or systems components.
What to Check
How to Test
Step 1: Review Documentation
Examine the System Security Plan (SSP) and related artifacts for PE-14(1) implementation details. Verify the organization has documented how this control is satisfied.
Step 2: Validate Implementation
# For cloud environments, use cloud-audit-mcp tools
# For on-premises, review system configurations directly
# Example: Check if account management policies exist
grep -r "account.management\|access.control" /etc/security/ 2>/dev/null
Step 3: Test Operating Effectiveness
Verify the control is actively functioning, not just documented. Check logs, configurations, and operational evidence.
Tools
| Tool | Purpose | Usage |
|---|
| Manual Review | Documentation and interview-based | N/A |
Remediation Guide
Control Statement
Employ the following automatic environmental controls in the facility to prevent fluctuations potentially harmful to the system: [organization-defined].
Implementation Guidance
The implementation of automatic environmental controls provides an immediate response to environmental conditions that can damage, degrade, or destroy organizational systems or systems components.
Risk Assessment
| Finding | Severity | Impact |
|---|
| PE-14(1) Automatic Controls not implemented | Medium | Physical and Environmental Protection |
