Does your organization have a system in place to monitor the usage of IT resources including storage, power, compute, and network bandwidth?
Explanation
Resource monitoring is essential for detecting anomalies that could indicate security incidents, such as unexpected spikes in network traffic potentially signaling data exfiltration, or unusual compute usage that might indicate cryptomining malware.
Effective monitoring also helps with capacity planning, performance optimization, and can provide early warning of resource exhaustion that could lead to service disruptions or denial of service conditions.
Evidence could include screenshots of monitoring dashboards (e.g., from tools like Nagios, Prometheus, Grafana, or cloud provider monitoring services), documentation of monitoring thresholds and alerts, or reports showing historical resource usage patterns with annotations for investigated anomalies.
Implementation Example
Monitor usage of storage, power, compute, network bandwidth, and other resources
ID: PR.IR-04.269
Context
- Function
- PR: PROTECT
- Category
- PR.IR: Technology Infrastructure Resilience
- Sub-Category
- Adequate resource capacity to ensure availability is maintained
Related questions
- Has your organization implemented network segmentation that separates different trust boundaries and platform types, with controlled communications between segments?
- Has your organization implemented network segmentation to isolate internal networks from external networks, with controls that restrict inbound traffic to only necessary communications?
- Has your organization implemented a zero trust architecture that restricts network access to each resource based on the principle of least privilege?
- Does your organization perform endpoint health checks before allowing devices to access production resources?
- Has your organization implemented physical safeguards to protect equipment from environmental threats such as flooding, fire, wind, excessive heat, and humidity?
- Do you require service providers who operate systems on your behalf to implement protections against environmental threats and maintain adequate operating infrastructure?