4.2.5 Where appropriate, the relevant entities shall ensure that monitoring and adjustment of resources …

Requirement

Where appropriate, the relevant entities shall ensure that monitoring and adjustment of resources, including facilities, systems and personnel, is duly informed by backup and redundancy requirements.

Guidance

• Decisions about resource allocation and adjustments should be guided by the need for backups and redundancy. To this end, the entity might consider one or more of the following (indicative, non-exhaustive list):
  • prioritisation of resources based on the results of the risk analysis;
  • partial redundancy;
  • diverse backup locations; and
  • continuous monitoring of the resources where redundancy is necessary.

Examples of evidence

• Evidence of elements referred to in point 4.2.4 of the Annex to the regulation.
• Evidence from periodic simulations and awareness raising activities to assess the readiness of personnel and the adequacy of the procedures.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• ENISA -