39
InformatIon SecurIty PolIcy DeveloPment for comPlIance
Advance planning and preparation are required to ensure the avail-
ability of adequate capacity and resources to deliver the required
system performance.
Projections of future capacity requirements should be made to reduce
the risk of system overload.
e operational requirements of new systems should be established,
documented, and tested prior to their acceptance and use.
A.10.3.1 Capacity
ma
nagement
Control: e use of resources should be monitored, tuned, and
projections made of future capacity requirements to ensure
the required system performance.
A.10.3.2 System
ac
ceptance
Control: Acceptance criteria for new information systems,
upgrades, and new versions should ...