CISSP 10.2 - Implement Site & Facility Security Controls (Part 4 of 4)

This episode of the ISC2 Certified Information Systems Security Professional (CISSP) exam prep series closes Domain 3’s facility controls by facing the two great physical threats, water and fire. It works through life safety, suppression choices, and the aftermath, showing how deliberate planning protects people first and keeps the worst physical events survivable.

Frequently Asked Questions

Why is water such a danger to your systems?

Water and electricity together mean destroyed gear and a real risk of electrocution. Leaks are rare but severe, so locate server rooms and critical equipment well away from pipes and water sources. Install water-detection circuits on the floor or beneath a raised floor so an alarm sounds as moisture creeps toward the racks, and know where your shutoff valves and drains are before you need them. Also study the site for drainage and flood history.

What is the fire triangle, and how do the stages unfold?

The triangle names the three ingredients every fire needs, fuel, heat, and oxygen, feeding a chemical reaction at the center; remove any one and the fire dies. Water pulls out heat, dry powders and soda acid smother fuel, carbon dioxide displaces oxygen, halon substitutes disrupt the chemistry, and foam attacks heat and fuel. Fire moves through four stages, incipient, smoke, flame, and heat, so catching it early keeps both the fire and the cleanup small.

Which fire extinguisher fits which fire?

The class must match the fuel. Class A handles ordinary combustibles with water or soda acid, Class B covers flammable liquids with foam or gas and never water, and Class C covers electrical fires with carbon dioxide or gas. Class D is for burning metals, which need dry powder, and Class K is for cooking oils quenched with alkaline agents. Most offices carry a multiclass ABC extinguisher, and none work once the fire reaches the final heat stage.

How do water suppression systems differ?

They differ by how and when they let water flow. A wet pipe system stays full and discharges instantly, a dry pipe system holds pressurized gas that opens a valve so water follows moments later, and a preaction system adds a two-stage safeguard that lets you halt a false alarm before a drop falls. A deluge system dumps a huge volume through wide-open heads at once, which is wrong for electronics. For people and computers together, the preaction system is the safe choice.

When do you reach for gas instead of water?

Reach for gas when people are not present and water would do harm. Gas systems smother fire fast and leave equipment undamaged, but they work by removing oxygen, which makes them deadly to occupants. Carbon dioxide is effective yet dangerous because it can asphyxiate and is colorless and odorless, and halon has been phased out for cleaner substitutes like FM-two-hundred. Reserve gas systems for spaces without people, such as engine compartments, generator rooms, and areas around flammable liquids.

Reference: This article is based on concepts discussed in CISSP 10.2 - Implement Site & Facility Security Controls (Part 4 of 4).