The company formally addresses the risk of power or environmental failures affecting critical systems
This policy control names in writing which on-premise equipment depends on power and cooling and what the company decided to do about it, the scope RCF-0308's testing and RCF-0309's UPS sizing act on. It does not itself perform the protection A.7.11 requires.
This policy control names which equipment depends on power and cooling and what the company decided to do about it, the risk acknowledgment A.7.5 requires.