NIST 800-53 REV 5 • PHYSICAL AND ENVIRONMENTAL PROTECTION
PE-15 — Water Damage Protection
Protect the system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible, working properly, and known to key personnel.
Supplemental Guidance
The provision of water damage protection primarily applies to organizational facilities that contain concentrations of system resources, including data centers, server rooms, and mainframe computer rooms. Isolation valves can be employed in addition to or in lieu of master shutoff valves to shut off water supplies in specific areas of concern without affecting entire organizations.
Practitioner Notes
Water damage is a real threat to IT equipment — from burst pipes, roof leaks, or flooding. You need master shutoff valves that key personnel know about and can access quickly to stop water flow in an emergency.
Example 1: Identify and label all water shutoff valves in or near your server room and IT equipment areas. Ensure they are accessible (not blocked by equipment or debris) and functioning properly. Test them annually. Train IT and facilities staff on their locations.
Example 2: Document shutoff valve locations on your facility floor plans and include them in your emergency procedures. Avoid locating IT equipment below water pipes when possible. If water pipes must run above or near your server room, install drip pans and water sensors beneath them.