CP-2(2): Capacity Planning
Control Family:
Parent Control:
CSF v1.1 References:
Baselines:
- High
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- CP-2(2): Capacity Planning
Control Statement
Conduct capacity planning so that necessary capacity for information processing, telecommunications, and environmental support exists during contingency operations.
Supplemental Guidance
Capacity planning is needed because different threats can result in a reduction of the available processing, telecommunications, and support services intended to support essential mission and business functions. Organizations anticipate degraded operations during contingency operations and factor the degradation into capacity planning. For capacity planning, environmental support refers to any environmental factor for which the organization determines that it needs to provide support in a contingency situation, even if in a degraded state. Such determinations are based on an organizational assessment of risk, system categorization (impact level), and organizational risk tolerance.