STIGQter: STIG Summary: Traditional Security Checklist Version: 1 Release: 3 Benchmark Date: 15 Jun 2020:

Environmental IA Controls - Emergency Lighting and Exits - Documentation and Testing

DISA Rule

SV-41029r3_rule

Vulnerability Number

V-30985

Group Title

Environmental IA Controls - Emergency Lighting and Exits - Documentation and Testing

Rule Version

EC-02.03.01

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Emergency Lighting and Exit documentation and testing.

1. There must be written procedures for emergency exit.

2. Evacuation routes must be posted in the facility for employee reference.

3. The emergency exit plan must be rehearsed on a periodic basis.

4. Emergency lighting must be tested on a periodic basis.

Check Contents

Review Emergency Lighting and Exit documentation and testing. Check to ensure:

1. There are written procedures for emergency exit.

2. Evacuation routes are posted within the facility for employee reference.

3. The plan is rehearsed on a periodic basis.

4. Emergency lighting is tested on a periodic basis.

NOTES: This requirement should not be applied to a tactical environment, unless it is a fixed computer facility supporting missions in a Theater of Operations. The considerations to be applied for applicability in a tactical environment are:

1) The facility containing the computer room has been in operation over one year.
2) The facility is "fixed facility" - a hard building made from normal construction materials - wood, steel, brick, stone, mortar, etc.

Vulnerability Number

V-30985

Documentable

False

Rule Version

EC-02.03.01

Severity Override Guidance

Review Emergency Lighting and Exit documentation and testing. Check to ensure:

1. There are written procedures for emergency exit.

2. Evacuation routes are posted within the facility for employee reference.

3. The plan is rehearsed on a periodic basis.

4. Emergency lighting is tested on a periodic basis.

NOTES: This requirement should not be applied to a tactical environment, unless it is a fixed computer facility supporting missions in a Theater of Operations. The considerations to be applied for applicability in a tactical environment are:

1) The facility containing the computer room has been in operation over one year.
2) The facility is "fixed facility" - a hard building made from normal construction materials - wood, steel, brick, stone, mortar, etc.

Check Content Reference

M

Target Key

2506

Comments