Protect equipment from disruption caused by failures in supporting utilities such as power, cooling and communications, which keep your systems running.
What an auditor, or Sekit's evidence engine, asks for.
Facility resilience and media controls
The protections against power or climate failures affecting critical systems, and the control of cabling and facility security zones.
From the Sekit evidence catalog
In practice
In practice this control is about whether the UPS units and cooling systems protecting on-premise equipment get tested on a schedule, not installed once and left running unattended. Auditors ask for the last maintenance or test record for the UPS and generator, and check whether alerts from environmental sensors reach someone who can respond outside business hours. The common gap is a UPS sized for the load at installation but never resized as equipment was added, so it now covers a fraction of the outage window the business needs.
Common gaps
The UPS was sized for the original server room load and never resized as more equipment was added over time.
Generator and UPS maintenance is scheduled but the last completed test on file is over a year old.
Environmental sensor alerts for temperature or humidity are configured but route to an inbox nobody monitors outside office hours.
Questions your auditor will ask
When was the UPS or backup generator last tested under load?
Power and cooling systems are tested and maintained on a schedule, and the maintenance record shows the date and outcome of the last test.
What on-premise equipment depends on power and cooling, and has that dependency been reviewed?
A written acknowledgement names which on-premise equipment depends on power and cooling and states what the company has decided to do about each item.
Do environmental alerts reach someone who can act outside office hours?
UPS capacity, environmental sensors and alerts are configured to reach a person able to respond, rather than a monitoring dashboard nobody watches after hours.
Where regulation demands it
NIS2 13.1 addresses supporting utilities directly, the exact power and cooling protection A.7.11 requires for equipment on premise.
ENS mp.if.4 covers Energía eléctrica, the power resilience requirement A.7.11 sets for equipment relying on it.
Related controls
Via the shared Sekit CSF topic, not the framework's own index.