risk
Inadequate protection against fire, flood and physical hazards
Absence of fire suppression, smoke detection, flood barriers, or drainage in facilities housing information assets, and poor cabling infrastructure susceptible to damage, tapping, or accidental disconnection.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- category
- operational
- domain
- Physical & Environmental Security
- Business Continuity & Disaster Recovery
- taxonomy
- iso-27005-vulnerability
- iso-27005-threat
- inherent_rating
- medium
Details
- risk_id
- phys-fire-water-suppression-gap
- category
- operational
- likelihood
- low
- impact
- high
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- iso-27005-vulnerability
- iso-27005-threat
Source
No record-specific source URL is provided.
Connections
- UC-ACCESS-19 — Restrict physical access and maintain environmental safeguards mitigates Inadequate protection against fire, flood and physical hazards
- strength
- primary
- rationale
- Operating fire detection and suppression directly mitigates the fire hazard to systems that is the core gap this risk names.
- UC-PHYS-03 — Protect facilities against fire, water, and environmental hazards mitigates Inadequate protection against fire, flood and physical hazards
- strength
- primary
- rationale
- Fire detection/suppression, water-damage detection with shutoff, and environmental monitoring directly fill the fire/flood protection gap this risk names.
- UC-PHYS-06 — Protect power and communications cabling from damage and taps mitigates Inadequate protection against fire, flood and physical hazards
- strength
- related
- rationale
- Protected conduits, line separation, and tamper inspection address the cabling-damage clause, but the operative defense against this risk's fire/flood core is suppression and drainage (UC-PHYS-03).