Environmental Continuity

Control Statement

For each facility carrying a mission service, the environmental conditions the service depends on shall be identified, and the period the facility can sustain the service without them shall be stated.

Purpose. To know how long the physical ground holds without support, so that recovery objectives are not contradicted by the buildings the services sit in.

Discussion

This control's value is almost entirely in a comparison that two separate documents make impossible: the environmental sustain period of a facility against the recovery time objectives of the services housed in it. A four-hour uninterruptible supply under a twenty-four-hour recovery objective is a contradiction that is obvious once the two figures are placed side by side and invisible while they live in a facilities record and a continuity plan respectively. Putting facilities on the overlay is what makes the comparison routine.

Goals and Metrics

A metric that cannot come out badly is not a metric. Each of these is capable of reporting that the control is not working.

Accountability

Exactly one role is accountable, and every other role carries at least Informed — no control in the published catalog leaves a role with zero relationship to it. That is a stated property of how these were authored, not a coincidence, and not a claim that every role's work is worth equal attention here.

Inputs and Outputs

Activities

1. L2Identify the environmental conditions each mission-carrying facility depends on — power, cooling, water, connectivity, physical access.
2. L2State the period the facility can sustain the service without each.
3. L2Record both against the facility on the overlay.
4. L3Test the stated sustain periods rather than taking them from design specification or vendor rating.
5. L3Compare each sustain period against the recovery objectives (RC-1) of the services housed there, and raise a finding on every contradiction.
6. L3Include dependencies on external providers and on other facilities, since a sustain period assuming resupply is contingent on the resupply arriving.
7. L3Record the degradation sequence — which services lose availability first as a condition is lost — so the loss is a plan rather than a discovery.
8. L4Trend tested sustain periods, since capacity degrades with equipment age while the recorded figure does not.
9. L4Measure the interval since each sustain period was last tested rather than last recorded.
10. L5Feed persistent contradictions between sustain period and recovery objective into siting, investment or objective revision, rather than carrying the finding indefinitely.

Measurement

Evidence and Assessment

Related Guidance

Position in the Chain

Derived from the other controls’ own declarations, so the two directions cannot disagree.

Where This Control Is Used

Derived, in every case, from the declaration at the other end: the forms whose techniques name this control, the artifacts whose producing and consuming controls include it, the layers whose control lists name it, and the roles its own accountability chart puts to work. Nothing here is authored on this page, so the sheet cannot claim an edge the other end does not.