Does your organization have a documented capacity planning process that forecasts future resource needs and scales infrastructure accordingly?
Explanation
Effective capacity planning ensures that IT resources (servers, storage, network bandwidth, etc.) can meet both current and anticipated future demands without service disruptions or performance degradation. This process should include regular monitoring of resource utilization, trend analysis, and proactive scaling based on business growth projections and technology changes.
Evidence could include capacity planning documentation, resource utilization reports with forecasting models, meeting minutes from capacity review sessions, or infrastructure scaling plans that show how resources will be adjusted based on projected needs. Cloud environment auto-scaling policies and thresholds would also serve as relevant evidence.
Implementation Example
Forecast future needs, and scale resources accordingly
ID: PR.IR-04.270
Context
- Function
- PR: PROTECT
- Category
- PR.IR: Technology Infrastructure Resilience
- Sub-Category
- Adequate resource capacity to ensure availability is maintained
Related questions
- Has your organization implemented network segmentation that separates different trust boundaries and platform types, with controlled communications between segments?
- Has your organization implemented network segmentation to isolate internal networks from external networks, with controls that restrict inbound traffic to only necessary communications?
- Has your organization implemented a zero trust architecture that restricts network access to each resource based on the principle of least privilege?
- Does your organization perform endpoint health checks before allowing devices to access production resources?
- Has your organization implemented physical safeguards to protect equipment from environmental threats such as flooding, fire, wind, excessive heat, and humidity?
- Do you require service providers who operate systems on your behalf to implement protections against environmental threats and maintain adequate operating infrastructure?