PR.IR-02 safeguards technology assets from environmental threats like flooding, fire, or excessive heat, using physical protections and resilient infrastructure. This includes requiring service providers to mitigate such risks in their operations, ensuring consistent protection across owned and outsourced systems. It maintains asset availability under adverse conditions.

This subcategory aligns environmental safeguards with risk strategies, prioritizing critical assets to minimize downtime or damage. It ensures operational continuity by addressing natural and facility-based threats proactively. PR.IR-02 complements cybersecurity with physical resilience.