Has your organization implemented load balancing solutions to enhance system capacity and reliability?
Explanation
Load balancing distributes workloads across multiple computing resources to prevent any single resource from becoming overwhelmed, which improves both system performance and availability. By implementing load balancing, organizations can maintain service continuity during traffic spikes, hardware failures, or maintenance activities, reducing the risk of service disruptions that could impact security or business operations.
Evidence of fulfillment could include network architecture diagrams showing load balancer configurations, load balancer configuration files, vendor documentation for implemented load balancing solutions, or monitoring dashboards that display traffic distribution across resources.
Implementation Example
Use load balancing to increase capacity and improve reliability
ID: PR.IR-03.267
Context
- Function
- PR: PROTECT
- Category
- PR.IR: Technology Infrastructure Resilience
- Sub-Category
- Mechanisms are implemented to achieve resilience requirements in normal and adverse situations
Related questions
- Has your organization implemented network segmentation that separates different trust boundaries and platform types, with controlled communications between segments?
- Has your organization implemented network segmentation to isolate internal networks from external networks, with controls that restrict inbound traffic to only necessary communications?
- Has your organization implemented a zero trust architecture that restricts network access to each resource based on the principle of least privilege?
- Does your organization perform endpoint health checks before allowing devices to access production resources?
- Has your organization implemented physical safeguards to protect equipment from environmental threats such as flooding, fire, wind, excessive heat, and humidity?
- Do you require service providers who operate systems on your behalf to implement protections against environmental threats and maintain adequate operating infrastructure?