CFTC System Safeguards (17 CFR 37, 38, 39, 49)
CFTC System Safeguards: Risk Analysis and Oversight Program

CFTC System Safeguards (17 CFR 37, 38, 39, 49) CFTC-SS-12: Capacity and Performance Planning Category

Address capacity and performance planning within the program, including controls for monitoring systems to ensure adequate scalable capacity and testing, monitoring and analysis of current and projected capacity and performance and of possible degradation from planned system changes.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 22 controls across 13 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

FedRAMP High · 3 controls

  • AU-4 Audit Log Storage Capacity
  • CM-4 Impact Analyses
  • SC-5 Denial-of-Service Protection

FedRAMP Moderate · 3 controls

  • AU-4 Audit Log Storage Capacity
  • CM-4 Impact Analyses
  • SC-5 Denial-of-Service Protection

C5 (Germany) · 2 controls

DORA · 2 controls

  • NIST-CSF-DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events
  • NIST-CSF-PR.IR-04 Adequate resource capacity to ensure availability is maintained

SOC 2 · 2 controls

  • SOC2-A1.1 A1.1 Managing processing capacity
  • SOC2-CC3.4 CC3.4 Identifying and assessing significant changes (COSO principle 9)
  • CPS230-P25 Information and Technology Capability and Asset Health

HIPAA Security Rule · 1 control

  • 164.306 Security Standards: General Rules

ISO 27001:2022 · 1 control

  • 8.6 Capacity management

ISO 27002:2022 · 1 control

  • 8.6 Capacity management

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in CFTC System Safeguards: Risk Analysis and Oversight Program

You are reading one control. How much of CFTC System Safeguards (17 CFR 37, 38, 39, 49) have you already done?

CFTC System Safeguards (17 CFR 37, 38, 39, 49) CFTC-SS-12 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of CFTC System Safeguards (17 CFR 37, 38, 39, 49) your existing evidence covers. Hold NIST Cybersecurity Framework 2.0 and 28 of 39 CFTC System Safeguards (17 CFR 37, 38, 39, 49) controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 5 were rejected on the NIST Cybersecurity Framework 2.0 pair alone.

Query this from an agent

The graph holds this control, the 22 it maps to, and the evidence behind each claim, over MCP and REST.