Availability
What is Availability?
The property of being accessible and usable upon demand by authorized users, one of the three pillars of information security along with confidentiality and integrity.
Terms that appear alongside availability
Each of these is named in at least one of the same controls as availability. The number is how many controls name both.
- integrity 106 shared controls
- confidentiality 86 shared controls
- nist 36 shared controls
- cybersecurity 29 shared controls
- resilience 29 shared controls
- encryption 27 shared controls
- incident response 21 shared controls
- audit 21 shared controls
Frameworks that govern availability
What the standards actually require on availability
Requirements naming availability across 6 standards, quoted from the control text.
Maintain availability of information in the event of the loss of cryptographic keys by users.
NIST800-SC-12(1) · SC-12(1) Cryptographic Key Establishment and Management | Availability →The possible sources of funding, the options for obtaining it and what each source means for expected investment returns are worked out. Funds currently available and committed, spending approved and spending incurred so far are understood;
cobit-2019::APO05.01 · APO05.01 Determine the availability and sources of funds →Maintain availability of information in the event of the loss of cryptographic keys by users.
nist-sp-800-53-revision-5-1-high::SC-12(1) · SC-12(1) Cryptographic Key Establishment and Management | Availability →Agencies must work out the availability and recovery requirements of their systems and must put in place measures that support them, consistent with the agency SRMP.
new-zealand-information-security-manual-nzism::6.4.5.C.01 · 6.4.5.C.01 Availability and recovery requirements with supporting measures →Continuous real-time monitoring of the capacity and availability of online services is performed.
ISM-1581 · Real-time capacity and availability monitoring →Increase the availability of incident response information and support through automated mechanisms.
fbi-cjis-security-policy::IR-7(1) · IR-7(1) Incident Response Assistance | Automation Support for Availability of Information and Support →Questions people ask about availability
What is Availability?
Why is Availability important for compliance?
Which compliance frameworks address Availability?
Where can I learn more about Availability?
See how Availability applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.