# Put a licensed fire-protection engineer over records-storage system design > Use 36 CFR 1234.12 - Records storage fire safety to review this narrow operational decision without extending the source beyond its stated scope. - Canonical URL: https://update.dsesecurity.com/updates/put-a-licensed-fire-protection-engineer-over-records-storage-system-design/ - Publisher: Detection Systems & Engineering (DSE Security) - Author: DSE Security Editorial Team - Published: 2026-08-27T12:11:31+00:00 - Modified: 2026-08-27T13:07:00+00:00 - Last reviewed by DSE: 2026-08-26 - Resource type: Playbook - DSE priority: Advisory - Topics: Access Control, Business Continuity, Cybersecurity - Reading time: 3 minutes ## What you need to know Use 36 CFR 1234.12 - Records storage fire safety to review this narrow operational decision without extending the source beyond its stated scope. ## Potentially affected Teams, systems, services, or facilities within the stated scope of 36 CFR 1234.12 - Records storage fire safety ## DSE recommendation Compare the observed state with the cited official source, document applicability and exceptions, and test any approved change with rollback safeguards. ## Article Keep this document to one review outcome: Put a licensed fire-protection engineer over records-storage system design. Only the official source and traced locations below supply facts. Confirm applicability before acting. ## Source fact: The official [36 CFR 1234.12 – Records storage fire safety](https://www.ecfr.gov/current/title-36/section-1234.12) from National Archives and Records Administration via eCFR supports the following bounded statements: - Under 36 CFR 1234, the rule requires that all record storage and adjoining areas be protected by a professionally-designed fire-safety detection and suppression system that is designed to limit the maximum anticipated loss in any single fire event involving a single ignition and no more than 8 ounces of accelerant to a maximum of 300 cubic feet of records destroyed by fire. The research record locates this support at 36 CFR 1234.12(s) (eCFR anchor p-1234.12(s)). - Under 36 CFR 1234, the rule requires that the fire detection and protection systems be designed or reviewed by a licensed fire protection engineer. The research record locates this support at 36 CFR 1234.12(a) (eCFR anchor p-1234.12(a)). The source support ends with the statements listed above. Use them to examine critical rooms, power, cooling, water, fire protection, alternate sites, physical barriers, and documented recovery paths in the applicable environment, not to imply a wider guarantee. ## What the source does not establish Federal records-storage regulation with incorporated standards; record configuration, sprinkler and detection design, fire code, professional seals, waivers, and NARA review require qualified engineering. It does not establish a deployment’s current state, authorize a production change, prove compliance, or show that identity and access control, Windows DNS where networked services use it, time, communications, utilities, life-safety systems, vendors, and authorized responders are healthy. Documented options are review inputs, not universal mandates. ## Applicability questions - For source statement 1 at 36 CFR 1234.12(s) (eCFR anchor p-1234.12(s)), which observable configuration, record, or test can confirm applicability here? - For source statement 2 at 36 CFR 1234.12(a) (eCFR anchor p-1234.12(a)), which observable configuration, record, or test can confirm applicability here? - Which owner can attest to the recorded state of critical rooms, power, cooling, water, fire protection, alternate sites, physical barriers, and documented recovery paths, including exceptions? - What baseline for identity and access control, Windows DNS where networked services use it, time, communications, utilities, life-safety systems, vendors, and authorized responders must accompany the source-specific observation? - Which success, stop, and escalation criteria are written before testing begins? ## DSE recommendation: DSE recommends using the cited source as the evidence anchor for this decision. Make the source, asset scope, owner, and expected outcome explicit in the review record. Record the source location, examined part of critical rooms, power, cooling, water, fire protection, alternate sites, physical barriers, and documented recovery paths, observed and expected states, owner, and reason for deviation. Do not move from citation to production in one step. Pilot the decision where practical, observe agreed signals, retain a reversal point, and verify identity and access control, Windows DNS where networked services use it, time, communications, utilities, life-safety systems, vendors, and authorized responders. Handle credentials, keys, recovery data, and personal information through approved secure channels. ## Verification and evidence Build a reproducible chain from 36 CFR 1234.12(s) (eCFR anchor p-1234.12(s)); 36 CFR 1234.12(a) (eCFR anchor p-1234.12(a)) to the observed environment. Useful domain evidence includes facility inventories, inspection records, alarm and shutdown tests, maintenance history, recovery exercises, and corrective actions; label every item with scope, timestamp, collector, and stable identifier. Keep before-state evidence, approval, test or change result, exceptions, and after-state evidence together. Use an approved lab, window, or nonproduction path for risky tests. Set a recheck trigger for version, architecture, dependency, vendor, incident, or ownership change. A check proves only what was observed. ## Official references - [36 CFR 1234.12 – Records storage fire safety](https://www.ecfr.gov/current/title-36/section-1234.12) — National Archives and Records Administration via eCFR ## Primary reference - Name: 36 CFR 1234.12 - Records storage fire safety - Authority: www.ecfr.gov - URL: https://www.ecfr.gov/current/title-36/section-1234.12 - Source publication date: Not stated by the source ## Citation and use Preferred citation: “Put a licensed fire-protection engineer over records-storage system design,” DSE Security, https://update.dsesecurity.com/updates/put-a-licensed-fire-protection-engineer-over-records-storage-system-design/ Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/ Usage and citation policy: https://update.dsesecurity.com/usage/ Copyright © 2026 Detection Systems & Engineering. All rights reserved.