High Availability
What is High Availability?
System design and implementation that ensures a predetermined level of operational performance and uptime, typically 99.9% or higher.
Terms that appear alongside high availability
Each of these is named in at least one of the same controls as high availability. The number is how many controls name both.
- availability 7 shared controls
- business continuity 3 shared controls
- resilience 3 shared controls
- nist 3 shared controls
- disruption 2 shared controls
- disaster recovery 2 shared controls
- failover 2 shared controls
- iso 22301 2 shared controls
Frameworks that govern high availability
What the standards actually require on high availability
Requirements naming high availability across 6 standards, quoted from the control text.
Where a high availability requirement exists for website hosting, CDNs that cache websites are used.
ISM-1438 · CDNs for high availability website hosting →The FI must make all reasonable effort to maintain high availability for critical systems and must ensure the total unscheduled downtime of each critical system affecting operations or customer service does not exceed 4 hours in any rolling 12-month period.
monetary-authority-of-singapore-technology-risk-management-guidelines::TRMN.5 · Notice on TRM paragraph 5: high availability, at most 4 hours unscheduled downtime in 12 months →For IT and cyber third-party arrangements outside the Outsourcing Directions (paragraphs 126 to 135), the bank runs a vendor risk assessment with controls proportionate to risk and materiality to mitigate concentration risk, eliminate or manage conflicts of in...
rbi-cybersecurity-framework-for-banks::126 · Para 126: vendor risk assessment and proportionate controls →Multi-factor authentication including for VPNs, RDP, SSH and other remote access, and for all users when they perform a privileged action or access an important (sensitive/high-availability) data repository.
ASD37-20 · Multi-factor authentication (Essential) →Be able to restore systems and data from a secure image or copy to get a clean system, with governance keeping backup images current and working, adequate backup of essential information and software, retention periods and restore scenarios prioritising critic...
BIMCO-10.4 · Data recovery capability →Facilities, power and communications equipment included, are run in keeping with applicable law and regulation, technical and business needs, vendor specifications and health and safety guidance: the need to protect facilities from power fluctuations and outag...
cobit-2019::DSS01.05 · DSS01.05 Manage facilities →Questions people ask about high availability
What is High Availability?
Why is High Availability important for compliance?
Which compliance frameworks address High Availability?
Where can I learn more about High Availability?
See how High Availability applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.