If the resources available in one area are inadequate, this may also result in supply bottlenecks with these resources, possibly leading to overload and failures. Depending on the type of resources affected, a number of business processes may be impaired in the end by a minor event whose occurrence was also predictable. The lack of resources may occur in IT operations and communication links, but also in other areas of an organisation. If only inadequate personnel, time and financial resources are provided for certain tasks, this may have manifold negative repercussions. For example, the necessary roles in projects may not be staffed with suitable persons. When operating resources such as hardware or software are no longer sufficient to meet the requirements, specialised tasks may not be performed successfully under certain circumstances.

In many cases, compensation can still be made for personnel, scheduling, financial, technical and other shortcomings during regular operations for a limited period of time. Under serious time pressure, however, they become all the more apparent, for example in emergency situations.

Resources can also be overloaded deliberately when somebody generates an intensive demand for an operating resource provoking an intensive and permanent disturbance of the operating resource, see also G 0.40 Denial of Service.

Examples:

Pedidos ligados

Ligações
Tipo de ligação Pedido
is blocked by ISMS.1.A1 Acceptance of Overall Responsibility for Information Security by Top Management [Top Management] (B)
is blocked by ISMS.1.A4 Appointment of a Chief Information Security Officer [Top Management] (B)
is blocked by ISMS.1.A16 Creating Target-Group-Orientated Security Policies (H)
is blocked by ORP.1.A2 Assigning Responsibilities [Top Management] (B)
is blocked by ORP.1.A8 Managing Resources and Devices [IT Operation Department] (S)
is blocked by ORP.2.A5 Confidentiality Agreements for Third-Party Personnel (B)
is blocked by CON.1.A7 Drawing Up a Security Policy for the Use of Cryptographic Methods and Products (H)
is blocked by CON.1.A18 Cryptographic Replacement Modules [IT Operation Department] (H)
is blocked by OPS.1.1.2.A9 Sufficient Resources for the IT Operation Department (S)
is blocked by OPS.1.1.2.A17 Dual Control in IT Administration (H)
is blocked by OPS.1.1.2.A19 Consideration of High-Availability Requirements (H)
is blocked by OPS.1.1.3.A8 Secure Use of Tools for Patch and Change Management (S)
is blocked by OPS.1.1.3.A12 Use of Tools in Change Management (H)
is blocked by OPS.1.1.5.A6 Basic Structure of a Centralised Logging Infrastructure (S)
is blocked by OPS.1.1.5.A9 Providing Log Data for Assessment (S)
is blocked by OPS.1.1.5.A13 Highly Available Logging Infrastructure (H)
is blocked by OPS.1.1.6.A5 Performing Software Tests for Non-Functional Requirements [Tester] (B)
is blocked by OPS.1.1.7.A1 Specification of System Management Requirements (B)
is blocked by OPS.1.1.7.A2 System Management Planning (B)
is blocked by OPS.1.1.7.A8 Drawing Up a System Management Concept (S)
is blocked by OPS.1.1.7.A9 Detailed and Implementation Planning for System Management (S)
is blocked by OPS.1.1.7.A10 Concept for Secure Operation of the System Management Solution (S)
is blocked by OPS.1.1.7.A15 Status Monitoring, Logging, and Alerting of Relevant Events in the System Management Solution and the Systems to be Managed (S)
is blocked by OPS.1.2.6.A5 Use of Client-Server Mode for NTP (S)
is blocked by OPS.1.2.6.A9 Sufficient Availability of Accurate Time Sources (H)
is blocked by OPS.1.2.6.A11 Redundant NTP Servers (H)
is blocked by DER.1.A6 Continuous Monitoring and Analysis of Log Data (S)
is blocked by DER.1.A7 Training of Responsible Persons [Supervisor] (S)
is blocked by DER.1.A13 Regular Audits of Detection Systems (S)
is blocked by DER.1.A14 Evaluation of Log Data by Specialised Personnel (H)
is blocked by DER.2.1.A2 Drawing Up a Policy for Handling Security Incidents (B)
is blocked by DER.2.1.A3 Specification of Responsibilities and Contact Persons in the Event of Security Incidents (B)
is blocked by DER.2.1.A5 Remedial Action in Connection with Security incidents [IT Operation Department] (B)
is blocked by DER.2.1.A7 Establishment of a Procedure for Handling Security Incidents [Top Management] (S)
is blocked by DER.2.1.A8 Design of Organisational Structures for Handling Security Incidents (S)
is blocked by DER.2.1.A9 Definition of Reporting Paths for Security Incidents (S)
is blocked by DER.2.1.A12 Specification of Where Security Incident Handling Overlaps with Fault Management [BCM Officer] (S)
is blocked by DER.2.1.A19 Specifying Priorities for Handling Security Incidents [Top Management] (H)
is blocked by DER.2.1.A20 Creation of a Dedicated Reporting Office for Security Incidents (H)
is blocked by DER.2.1.A21 Assembling a Team of Experts for Handling Security Incidents (H)
is blocked by DER.2.1.A22 Reviewing Management System Efficiency in Handling Security Incidents (H)
is blocked by DER.2.2.A3 Pre-Selection of Forensic Service Providers (B)
is blocked by DER.2.2.A13 Framework Agreements with External Service Providers (H)
is blocked by DER.3.1.A1 Definition of Responsibilities [Top Management] (B)
is blocked by DER.3.1.A9 Selection of an Appropriate Audit Team or Revision Team (S)
is blocked by DER.3.1.A26 Monitoring and Adapting the Audit Program (S)
is blocked by DER.3.2.A1 Designation of Persons in Charge of the IS Audit [Top Management] (B)
is blocked by DER.3.2.A5 Selection of an Appropriate IS Audit Team (B)
is blocked by DER.4.A1 Creating a Business Continuity Plan (S)
is blocked by DER.4.A5 Establishing a Suitable Organisational Structure for Business Continuity Management [Top Management] (H)
is blocked by DER.4.A6 Providing Adequate Resources for Business Continuity Management [Top Management] (H)
is blocked by DER.4.A7 Creating a Contingency Concept [Top Management] (CIA)
is blocked by DER.4.A10 Tests and Emergency Drills [Top Management] (H)
is blocked by APP.2.1.A2 Planning the Use of Directory Services [Data Protection Officer, Process Owner] (B)
is blocked by APP.2.1.A7 Drawing Up a Security Concept for the Use of Directory Services (S)
is blocked by APP.2.1.A8 Planning of Partitioning and Replication in the Directory Service (S)
is blocked by APP.2.1.A9 Selection of Suitable Components for Directory Services [Process Owner] (S)
is blocked by APP.2.1.A12 Monitoring Directory Services (S)
is blocked by APP.2.2.A1 Planning Active Directory [Process Owner] (B)
is blocked by APP.2.2.A11 Monitoring Active Directory Infrastructure (S)
is blocked by APP.2.3.A1 Planning and Selecting Back Ends and Overlays for OpenLDAP (B)
is blocked by APP.2.3.A11 Restriction of the OpenLDAP Runtime Environment (S)
is blocked by APP.3.2.A8 Planning the Use of a Web Server (S)
is blocked by APP.3.2.A9 Defining a Web Server Security Policy (S)
is blocked by APP.3.2.A20 Appointing Contact Persons [Central Administration] (S)
is blocked by APP.3.3.A15 Planning File Servers (B)
is blocked by APP.3.3.A6 Acquiring a File Server and Selecting a Service (S)
is blocked by APP.3.3.A7 Selecting a File System (S)
is blocked by APP.3.3.A9 Secure Storage Management (S)
is blocked by APP.3.3.A11 Using Storage Restrictions (S)
is blocked by APP.3.4.A2 Secure Basic Configuration of a Samba Server (B)
is blocked by APP.3.4.A3 Secure Configuration of a Samba Server (S)
is blocked by APP.3.6.A7 Monitoring of DNS Servers (B)
is blocked by APP.3.6.A11 Sufficient Capacity of DNS Servers (S)
is blocked by APP.3.6.A15 Analysis of Log Data (S)
is blocked by APP.3.6.A20 Feasibility Reviews of Business Continuity Plans (H)
is blocked by APP.4.3.A1 Creation of a Security Policy for Database Systems (B)
is blocked by APP.4.3.A11 Sufficient Hardware Capacity [Process Owner] (S)
is blocked by APP.4.3.A18 Database Management System Monitoring (S)
is blocked by APP.4.4.A2 Planning Automation with CI/CD (B)
is blocked by APP.4.4.A11 Container Monitoring (S)
is blocked by APP.5.2.A9 Secure Configuration of Exchange Servers (S)
is blocked by APP.6.A2 Drawing Up a Requirements Catalogue for Software [Process Owner] (B)
is blocked by APP.7.A1 Including Aspects of Individual Software in Software Deployment Planning (B)
is blocked by APP.7.A3 Specification of Security Functions for System Integration [IT Operation Department] (B)
is blocked by APP.7.A5 Appropriate Control of Application Development (S)
is blocked by SYS.1.1.A22 Integration into Contingency Planning (S)
is blocked by SYS.1.1.A23 Monitoring Systems and Servers (S)
is blocked by SYS.1.1.A25 Controlled Decommissioning of a Server (S)
is blocked by SYS.1.1.A35 Drawing Up and Maintaining an Operating Manual (S)
is blocked by SYS.1.1.A28 Increasing Availability Through Redundancy (H)
is blocked by SYS.1.2.2.A1 Planning of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S)
is blocked by SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)
is blocked by SYS.1.2.2.A12 Redundancy and High Availability in Windows Server 2012 (H)
is blocked by SYS.1.5.A2 Secure Use of Virtual IT Systems (B)
is blocked by SYS.1.5.A6 Logging in the Virtual Infrastructure (B)
is blocked by SYS.1.5.A7 Time Synchronisation in Virtual IT Systems (B)
is blocked by SYS.1.5.A8 Planning a Virtual Infrastructure [Planner] (S)
is blocked by SYS.1.5.A9 Network Planning for Virtual Infrastructure [Planner] (S)
is blocked by SYS.1.5.A15 Operation of Guest Operating Systems with Different Protection Needs (S)
is blocked by SYS.1.5.A17 Monitoring the Operating Condition and Configuration of the Virtual Infrastructure (S)
is blocked by SYS.1.5.A21 Secure Configuration of Virtual IT Systems for Increased Protection Needs (H)
is blocked by SYS.1.5.A24 Disabling Snapshots of Virtual IT Systems (H)
is blocked by SYS.1.5.A25 Minimal Use of Console Access to Virtual IT Systems (H)
is blocked by SYS.1.6.A1 Planning Container Use (B)
is blocked by SYS.1.6.A2 Container Management Planning (B)
is blocked by SYS.1.6.A3 Secure Use of Containerised IT Systems (B)
is blocked by SYS.1.6.A4 Planning the Provision and Distribution of Images (B)
is blocked by SYS.1.6.A5 Separation of Administration and Access Networks for Containers (B)
is blocked by SYS.1.6.A6 Use of Secure Images (B)
is blocked by SYS.1.6.A9 Suitability for Container Operation (S)
is blocked by SYS.1.6.A10 Policy for Images and Container Operation (S)
is blocked by SYS.1.6.A13 Release of Images (S)
is blocked by SYS.1.6.A14 Updating Images (S)
is blocked by SYS.1.6.A15 Limitation of Resources per Container (S)
is blocked by SYS.1.6.A19 Including Data Stores in Containers (S)
is blocked by SYS.1.6.A21 Extended Security Policies (H)
is blocked by SYS.1.6.A26 Advanced Isolation and Encapsulation of Containers (H)
is blocked by SYS.1.7.A16 Monitoring of z/OS Systems (S)
is blocked by SYS.1.7.A18 Role Concept for z/OS Systems (S)
is blocked by SYS.1.7.A24 Administration of Storage Media in z/OS Systems (S)
is blocked by SYS.1.7.A25 Stipulation of z/OS System Capacity (S)
is blocked by SYS.1.7.A26 Workload Management for z/OS Systems (S)
is blocked by SYS.1.7.A28 Licence Key Management for z/OS Software (S)
is blocked by SYS.1.7.A29 Protection of Unix System Services on z/OS Systems (S)
is blocked by SYS.1.7.A34 Batch Job Planning for z/OS Systems (H)
is blocked by SYS.1.7.A36 Internal Communication Between Operating Systems (H)
is blocked by SYS.1.7.A37 Parallel Sysplex in z/OS (H)
is blocked by SYS.1.8.A11 Secure Operation of a Storage Solution (S)
is blocked by SYS.1.8.A13 Monitoring and Administration of Storage Solutions (S)
is blocked by SYS.1.8.A14 Protection of an SAN Through Segmentation (S)
is blocked by SYS.1.8.A15 Secure Separation of Clients in Storage Solutions (S)
is blocked by SYS.3.2.3.A23 Using Automatic Deletion of Configuration Profiles (H)
is blocked by SYS.3.3.A1 Security Guidelines and Rules for the Use of Mobile Phones (B)
is blocked by SYS.3.3.A3 Raising Employee Awareness and Providing Training on the Use of Mobile Telephones (B)
is blocked by SYS.3.3.A7 Acquisition of Mobile Telephones (S)
is blocked by SYS.3.3.A12 Setting Up a Mobile Telephone Pool (S)
is blocked by SYS.3.3.A9 Securing the Power Supply for Mobile Telephones [User] (H)
is blocked by IND.3.2.A12 Dedicated OT Remote Maintenance Solution (H) [Planner]
is blocked by NET.1.1.A14 Implementation of Network Planning (B)
is blocked by NET.1.1.A20 Allocation of Dedicated Sub-Networks for IPv4/IPv6 End Device Groups (S)
is blocked by NET.1.1.A25 Detailed and Implementation Planning of Network Architecture and Design (S)
is blocked by NET.1.2.A14 Detailed and Implementation Planning (S)
is blocked by NET.1.2.A25 Status Monitoring for Network Components (S)
is blocked by NET.3.1.A5 Protection Against Fragmentation Attacks (B)
is blocked by NET.3.1.A6 Emergency Access to Routers and Switches (B)
is blocked by NET.3.1.A13 Administration Using a Separate Management Network (S)
is blocked by NET.3.1.A20 Security Aspects of Routing Protocols (S)
is blocked by NET.3.1.A22 Contingency Planning for Routers and Switches (S)
is blocked by NET.3.1.A28 Use of Certified Products (H)
is blocked by NET.3.2.A1 Creating a Security Policy (B)
is blocked by NET.3.2.A23 System Monitoring and Evaluation (S)
is blocked by NET.3.2.A24 Audits and Penetration Tests (S)
is blocked by NET.3.2.A32 Firewall Contingency Planning (S)
is blocked by NET.3.2.A25 Advanced Integrity Protection for Configuration Files (H)
is blocked by NET.3.2.A26 Outsourcing of Functional Extensions to Dedicated Hardware (H)
is blocked by NET.4.2.A1 Planning the Use of VoIP (B)
is blocked by NET.4.2.A12 Secure Decommissioning of VoIP Components (S)
is blocked by NET.4.3.A2 Information for Employees on Using Fax Machines (B)
is blocked by NET.4.3.A3 Secure Operation of a Fax Server [IT Operation Department] (B)
is blocked by NET.4.3.A14 Producing Copies of Incoming Fax Messages [User] (H)
is blocked by INF.11.A11 Replacement Arrangements in the Event of Breakdowns [Process Owner] (H)
is blocked by INF.12.A1 Selection of Appropriate Cable Types [IT Operation Department, Building Services] (B)
is blocked by INF.12.A6 Cabling Approval [IT Operation Department, Building Services] (S)
is blocked by INF.12.A17 Redundancies for IT Cabling [IT Operation Department] (H)
is blocked by INF.13.A7 Creating a Radio Frequency Register (S)
is blocked by INF.13.A18 Proactive Maintenance in TBM (S) [Planner]
is blocked by INF.13.A22 Performing System Tests in TBM (S) [Planner]
is blocked by INF.13.A25 Establishment of a Test Environment for TBM (H) [Planner]