Back

Monitor the usage and capacity of critical assets.


CONTROL ID
14825
CONTROL TYPE
Monitor and Evaluate Occurrences
CLASSIFICATION
Detective

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Monitoring and measurement, CC ID: 00636

This Control has the following implementation support Control(s):
  • Monitor the usage and capacity of Information Technology assets., CC ID: 00668


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Since the performance and capacities of various resources in computer systems have limitations, it is necessary to check their capabilities and usage situations in order to avoid any failures and processing capability declines of computer systems caused by these limitations. (P47.1. ¶ 1, FISC Security Guidelines on Computer Systems for Financial Institutions, Ninth Edition, Revised March 2020)
  • measurement and tracking of the organization's use of, and impact on, these resources; (§ 6.2.3.1 ¶ 4 b), ISO 37000:2021, Governance of organizations — Guidance, First Edition)
  • Implementation of access controls and activity monitoring over analytics tools and reports. (App A Objective 3:9f Bullet 5, FFIEC Information Technology Examination Handbook - Architecture, Infrastructure, and Operations, June 2021)
  • Monitor and report the usage of knowledge management assets and resources. (T0154, Reference Spreadsheet for the Workforce Framework for Cybersecurity (NICE Framework)”, July 7, 2020)