+CP-02(02) [H] Capacity Planning
|
CP-02(02) [H] Capacity Planning
Control
Conduct capacity planning so that necessary capacity for information processing, telecommunications, and environmental support exists during contingency operations.
Discussion
Capacity planning is needed because different threats can result in a reduction of the available processing, telecommunications, and support services intended to support essential mission and business functions. Organizations anticipate degraded operations during contingency operations and factor the degradation into capacity planning. For capacity planning, environmental support refers to any environmental factor for which the organization determines that it needs to provide support in a contingency situation, even if in a degraded state. Such determinations are based on an organizational assessment of risk, system categorization (impact level), and organizational risk tolerance.
Assessment Objective
- capacity planning is conducted so that the necessary capacity exists during contingency operations for information processing;
- capacity planning is conducted so that the necessary capacity exists during contingency operations for telecommunications;
- capacity planning is conducted so that the necessary capacity exists during contingency operations for environmental support.
Assessment Method
Examine
Contingency planning policy
procedures addressing contingency operations for the system
contingency plan
capacity planning documents
system security plan
other relevant documents or records
Interview
Organizational personnel with contingency planning and plan implementation responsibilities
organizational personnel responsible for capacity planning
organizational personnel with information security responsibilities
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|