Capacity Management
What is Capacity Management?
The process of ensuring that IT resources and infrastructure are sufficient to meet current and future business requirements.
Terms that appear alongside capacity management
Each of these is named in at least one of the same controls as capacity management. The number is how many controls name both.
- change management 6 shared controls
- hardening 3 shared controls
- system hardening 3 shared controls
- malware 3 shared controls
- problem management 2 shared controls
- release management 2 shared controls
- it service management 2 shared controls
- configuration management 2 shared controls
Frameworks that govern capacity management
What the standards actually require on capacity management
Requirements naming capacity management across 6 standards, quoted from the control text.
Give the cloud customer, so far as the service model permits, the means to monitor and steer the system resources allocated to it, so the customer can prevent resource contention and sustain adequate performance.
C5-OPS-03 · Capacity Management - Controlling of Resources →Requires resource consumption to be monitored, and capacity to be adjusted so it matches both current demand and what is expected.
iso-27002-2022::8.6 · Capacity management →Requirement defined in ISO 27018:2019, clause 12.1.3 (Capacity management). See licensed source for normative text. Implementation focus is to demonstrate conformity with the obligations of this clause through the artefacts listed in evidence_requirements.
iso-27018-2019::12.1.3 · Capacity management →Verify and document that a cloud service exhibits the Rapid Elasticity characteristic per NIST SP 800-145 Section 2: capabilities can be elastically provisioned and released, in some cases automatically, to scale rapidly outward and inward commensurate with de...
NISTSP145-3 · Rapid Elasticity Characteristic and Capacity Management →Implement operational procedures, change management, capacity management, malware protection, backup, logging, and network security controls.
TISAX-TECH-03 · Operations and Communications Security →IT Services Management. IT service management processes must support stable services, covering configuration management, change management, software release management, incident and problem management, and performance and capacity management (para 33).
BMA-9 · Information Technology Services Management →Questions people ask about capacity management
What is Capacity Management?
Why is Capacity Management important for compliance?
Which compliance frameworks address Capacity Management?
Where can I learn more about Capacity Management?
See how Capacity Management applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.