ISO/IEC 27013:2021
Clause 6.3: Areas where one standard strengthens the other – ISO/IEC 27013:2021

ISO/IEC 27013:2021 6.3.3: Use capacity and demand management to support information security and availability

What does 6.3.3 require?

Both standards (7.1) require resources to be determined and provided, which relates closely to capacity management; ISO/IEC 20000-1 (8.4.3) applies capacity management to four resource types (human, technical, information, financial), and although ISO/IEC 27001 has no specific capacity requirement, where controls address risks tied to capacity, looking across those four resource types helps. Understanding current and forecast demand (ISO/IEC 20000-1, 8.4.2) lets the organisation ensure security controls can support it. Availability in ISO/IEC 27000 means both accessible and usable, and capacity management supports both: too little storage makes a service inaccessible, too little network capacity makes it unusable.

Maintained by Gerard Blokdyk

Other controls in Clause 6.3: Areas where one standard strengthens the other – ISO/IEC 27013:2021

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.