Capacity Planning
What is Capacity Planning?
The process of determining the production capacity needed by an organization to meet changing demands for its products and services.
Terms that appear alongside capacity planning
Each of these is named in at least one of the same controls as capacity planning. The number is how many controls name both.
- nist 4 shared controls
- change management 4 shared controls
- resilience 3 shared controls
- availability 3 shared controls
- performance management 3 shared controls
- disruption 2 shared controls
- disaster recovery 2 shared controls
- iso 22301 2 shared controls
Frameworks that govern capacity planning
What the standards actually require on capacity planning
Requirements naming capacity planning across 6 standards, quoted from the control text.
The plan must require that capacity planning and analysis are part of essential function availability requirements and that IAC cyber asset resources are prioritised for essential functions over security functions;
api-1164::PR.DS-4 · PR.DS-4 Capacity planning with essential functions prioritised over security functions →Conduct capacity planning so necessary capacity exists during contingency operations; HIGH baseline.
CP-2(2) · Capacity Planning →Conduct capacity planning so that necessary capacity for information processing, telecommunications, and environmental support exists during contingency operations.
NIST800-CP-2(2) · CP-2(2) Contingency Plan | Capacity Planning →Conduct capacity planning so that necessary capacity for information processing, telecommunications, and environmental support exists during contingency operations.
nist-sp-800-53-revision-5-1-high::CP-2(2) · CP-2(2) Contingency Plan | Capacity Planning →The bank determines staffing for 24x7 monitoring, chooses in-house or managed service models, trains internal and provider staff, sets compensation and incentives to retain skills, defines SOC performance metrics and plans capacity for scalability and continui...
rbi-cybersecurity-framework-for-banks::223 · Para 223: 24x7 staffing model, training, incentives, SOC metrics and capacity planning →Before operation a study covers processing, storage (during processing and retention), communication, staffing and facility needs; R1 keeps a capacity forecast updated over the lifecycle and uses capacity monitoring tools.
spain-ens::op.pl.4 · Capacity planning and monitoring →Questions people ask about capacity planning
What is Capacity Planning?
Why is Capacity Planning important for compliance?
Which compliance frameworks address Capacity Planning?
Where can I learn more about Capacity Planning?
See how Capacity Planning applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.