PR.IR Technology Infrastructure Resilience

Statement

Networks and environments are protected from unauthorized logical access and usage

Guidance

Logically segment organization networks and cloud-based platforms according to trust boundaries and platform types (e.g., IT, IoT, OT, mobile, guests), and permit required communications only between segments

Guidance

Logically segment organization networks from external networks, and permit only necessary communications to enter the organization's networks from the external networks

Guidance

Implement zero trust architectures to restrict network access to each resource to the minimum necessary

Guidance

Check the cyber health of endpoints before allowing them to access and use production resources

Statement

The organization's technology assets are protected from environmental threats

Guidance

Protect organizational equipment from known environmental threats, such as flooding, fire, wind, and excessive heat and humidity

Guidance

Include protection from environmental threats and provisions for adequate operating infrastructure in requirements for service providers that operate systems on the organization's behalf

Statement

Mechanisms are implemented to achieve resilience requirements in normal and adverse situations

Guidance

Avoid single points of failure in systems and infrastructure

Guidance

Use load balancing to increase capacity and improve reliability

Guidance

Use high-availability components like redundant storage and power supplies to improve system reliability

Statement

Adequate resource capacity to ensure availability is maintained

Guidance

Monitor usage of storage, power, compute, network bandwidth, and other resources

Guidance

Forecast future needs, and scale resources accordingly