PR.IR-03.268
Has your organization implemented high-availability components such as redundant storage and power supplies to ensure system reliability?
Explanation
High-availability components help minimize system downtime by providing backup mechanisms that automatically take over when primary components fail. Examples include redundant storage arrays (RAID configurations), uninterruptible power supplies (UPS), redundant network paths, and clustered servers configured for automatic failover.
Evidence could include system architecture diagrams showing redundancy configurations, vendor documentation for high-availability solutions implemented, maintenance logs for redundant components, or results from failover testing that demonstrate the effectiveness of the redundant systems.
Implementation Example
Use high-availability components like redundant storage and power supplies to improve system reliability
ID: PR.IR-03.268
Context
- Function
- PR: PROTECT
- Category
- PR.IR: Technology Infrastructure Resilience
- Sub-Category
- Mechanisms are implemented to achieve resilience requirements in normal and adverse situations
Related questions
- Has your organization implemented network segmentation that separates different trust boundaries and platform types, with controlled communications between segments?
- Has your organization implemented network segmentation to isolate internal networks from external networks, with controls that restrict inbound traffic to only necessary communications?
- Has your organization implemented a zero trust architecture that restricts network access to each resource based on the principle of least privilege?
- Does your organization perform endpoint health checks before allowing devices to access production resources?
- Has your organization implemented physical safeguards to protect equipment from environmental threats such as flooding, fire, wind, excessive heat, and humidity?
- Do you require service providers who operate systems on your behalf to implement protections against environmental threats and maintain adequate operating infrastructure?