last sync: 2024-Nov-25 18:54:24 UTC

Microsoft Managed Control 1476 - Fire Protection | Regulatory Compliance - Physical and Environmental Protection

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1476 - Fire Protection
Id 0f3c4ac2-3e35-4906-a80b-473b12a622d7
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Physical and Environmental Protection control
Additional metadata Name/Id: ACF1476 / Microsoft Managed Control 1476
Category: Physical and Environmental Protection
Title: Fire Protection
Ownership: Microsoft
Description: The organization employs and maintains fire suppression and detection devices/systems for the information system that are supported by an independent energy source.
Requirements: Azure has implemented fire protection by installing fire detection and fire suppression systems at the Azure datacenters. Azure datacenters implement robust fire detection mechanisms. The Azure fire protection approach includes the use of photoelectric smoke detectors installed below the floor and on the ceiling, which are integrated with the fire protection sprinkler system. Additionally, there are Very Early Smoke Detection Apparatus (VESDA) systems in each colocation which monitor the air. VESDA units are highly sensitive air sampling systems installed throughout multiple high-value spaces. VESDA units allow for an investigative response prior to an actual fire detection alarm. Pull station fire alarm boxes are installed throughout the datacenters for manual fire alarm notification. Fire extinguishers are located throughout the datacenters and are properly inspected, serviced, and tagged annually. The security staff patrols all building areas multiple times every eight (8) hour shift. The Critical Environments (CE) Team does a daily site walk-through checking on each room and many component parts in each non-monitored room ensuring all fire watch requirements are being met. Areas containing sensitive electrical equipment (colocations, Main Distribution Frames (MDFs), etc.) are protected by double interlock pre-action (dry pipe) sprinkler systems. Dry pipe sprinklers are a two-stage pre-action system that requires both a sprinkler head activation (due to heat) as well as smoke detection to release water. The sprinkler head activation releases the air pressure in the pipes which allows the pipes to fill with water. Water is released when a smoke or heat detector is also activated. Fire detection/suppression and emergency lighting systems are wired into the datacenter UPS and generator systems providing for a redundant power source.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC