+PR.IR Technology Infrastructure Resilience
---+PR.IR-01 Networks and environments are protected from unauthorized logical access and usage
---+PR.IR-02 The organization's technology assets are protected from environmental threats
---+PR.IR-03 Mechanisms are implemented to achieve resilience requirements in normal and adverse situations
---+PR.IR-04 Adequate resource capacity to ensure availability is maintained
|
PR.IR Technology Infrastructure Resilience
StatementSecurity architectures are managed with the organization's risk strategy to protect asset confidentiality, integrity, and availability, and organizational resilience
1. Přehled
| Název |
Standard |
|
PR.IR-01 Networks and environments are protected from unauthorized logical access and usage
|
StatementNetworks and environments are protected from unauthorized logical access and usage GuidanceLogically segment organization networks and cloud-based platforms according to trust boundaries and platform types (e.g., IT, IoT, OT, mobile, guests), and permit required communications only between segments GuidanceLogically segment organization networks from external networks, and permit only necessary communications to enter the organization's networks from the external networks GuidanceImplement zero trust architectures to restrict network access to each resource to the minimum necessary GuidanceCheck the cyber health of endpoints before allowing them to access and use production resources
|
|
PR.IR-02 The organization's technology assets are protected from environmental threats
|
StatementThe organization's technology assets are protected from environmental threats GuidanceProtect organizational equipment from known environmental threats, such as flooding, fire, wind, and excessive heat and humidity GuidanceInclude protection from environmental threats and provisions for adequate operating infrastructure in requirements for service providers that operate systems on the organization's behalf
|
|
PR.IR-03 Mechanisms are implemented to achieve resilience requirements in normal and adverse situations
|
StatementMechanisms are implemented to achieve resilience requirements in normal and adverse situations GuidanceAvoid single points of failure in systems and infrastructure GuidanceUse load balancing to increase capacity and improve reliability GuidanceUse high-availability components like redundant storage and power supplies to improve system reliability
|
|
PR.IR-04 Adequate resource capacity to ensure availability is maintained
|
StatementAdequate resource capacity to ensure availability is maintained GuidanceMonitor usage of storage, power, compute, network bandwidth, and other resources GuidanceForecast future needs, and scale resources accordingly
|
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
- NIST -
EN: Publications of the National Institute of Standards and Technology (NIST), U.S. Department of Commerce, https://www.nist.gov/, from their electronic versions (OSCAL; SP 800-63-4 from its HTML version, https://pages.nist.gov/800-63-4/). Works of NIST employees are not subject to copyright protection in the United States (17 U.S.C. § 105); the OSCAL content is dedicated to the public domain worldwide (CC0 1.0); outside the United States NIST grants the right to reprint its technical series publications in all formats (NIST copyright statement). Republished courtesy of the National Institute of Standards and Technology; each document names its citation. Divided into sections and converted into the GRCA format, the wording unchanged. Only the versions published by NIST are authoritative.
DE: Veröffentlichungen des National Institute of Standards and Technology (NIST), U.S. Department of Commerce, https://www.nist.gov/, aus ihren elektronischen Fassungen (OSCAL; SP 800-63-4 aus ihrer HTML-Fassung, https://pages.nist.gov/800-63-4/). Werke von NIST-Beschäftigten sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105); die OSCAL-Inhalte sind weltweit gemeinfrei gestellt (CC0 1.0); außerhalb der USA räumt das NIST das Recht ein, seine Technical-Series-Publikationen in allen Formaten neu zu veröffentlichen (Copyright-Hinweis des NIST). „Republished courtesy of the National Institute of Standards and Technology“; jedes Dokument nennt seine Zitierangabe. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Maßgeblich sind allein die vom NIST veröffentlichten Fassungen.
|