Protect air intakes into the organizational facility.

CONTROL ID
02211

CONTROL TYPE
Physical and Environmental Protection

CLASSIFICATION
Preventive

This Control directly supports the implied Control(s):

Establish, implement, and maintain a Heating Ventilation and Air Conditioning system., CC ID: 00727

There are no implementation support Controls.

F55.4: If the power supply and air-conditioner rooms have windows and air vents, the organization shall take measures to protect them against crime and disaster. F79.2: The organization shall use fire dampers to protect the section through the lock and the adjacent sections where air-conditioning fa… (F55.4, F79.2, FISC Security Guidelines on Computer Systems for Banking and Related Financial Institutions, 7th Edition)
Fresh air intakes should be protected by placing them high enough above the ground so they are not accessible. If they are accessible from the ground, they should have intrusion alarms on them. (Revised Volume 4 1-I-24, Protection of Assets Manual, ASIS International)
Outdoor air intake vents should be located in a publicly inaccessible area. The lowest edge of the intake vents should be at the highest feasible level above the ground. The entrance to the intake vents should be covered with a minimum 45-degree sloped metal mesh cover. If the intake vents cannot be… (Pg 7 thru Pg 11, Pg 13, Pg 14, Guidance for Protecting Building Environments from Airborne Chemical, Biological, or Radiological Attacks, NIOSH, May 2002, DHHS (NIOSH) Publication No. 2002-139, May 2002)
Louvers and vents shall be protected by an electronic intrusion detection system (IDS) and the IDS shall be given top priority during an alarm situation. (§ 4.2.2 ¶ 2, CMS Business Partners Systems Security Manual, Rev. 10)