Law / Frameworks / NIST CSF 2.0 / Protect
NIST CSF 2.0, ProtectPR.IR-04
Adequate resource capacity to ensure availability is maintainedNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), PR.IR-04
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 2
- laws
- 1
- jurisdiction
- 0
- with court rulings behind them
- 0
- not yet in force
Sector security regimes
2 laws, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 European Union |
DORA, Articles 5-16 (ICT Risk Management Framework) |
Use and maintain updated ICT systems, protocols and tools that are appropriate to the magnitude of your operations, reliable, equipped with sufficient capacity to process data accurately and deal with peak volumes, and technologically resilient under stressed conditions (Article 7). |
| European Union |
Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication |
If you have a dedicated interface, ensure that it offers at all times the same level of availability and performance, including support, as the interfaces made available to your users, define transparent key performance indicators and service level targets at least as stringent, do not create obstacles to the provision of payment initiation and account information services, monitor the availability and performance of the interface and publish quarterly statistics on your website, and include in its design a strategy and plans for contingency measures with communication plans for payment service providers using the interface (Articles 32 and 33(1) and (2)). |
Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.