id: "CP-02(02)" title: "Capacity Planning" family: "CP" family_name: "Contingency Planning" sort_id: "cp-02.02" priority: "P2" implementation_level: "organization" parent: "CP-02" enhancement: True
Statement
Conduct capacity planning so that necessary capacity for information processing, telecommunications, and environmental support exists during contingency operations.
Guidance
Capacity planning is needed because different threats can result in a reduction of the available processing, telecommunications, and support services intended to support essential mission and business functions. Organizations anticipate degraded operations during contingency operations and factor the degradation into capacity planning. For capacity planning, environmental support refers to any environmental factor for which the organization determines that it needs to provide support in a contingency situation, even if in a degraded state. Such determinations are based on an organizational assessment of risk, system categorization (impact level), and organizational risk tolerance.
Assessment Objective: capacity planning is conducted so that the necessary capacity exists during contingency operations for information processing;
Assessment Objective: capacity planning is conducted so that the necessary capacity exists during contingency operations for telecommunications;
Assessment Objective: capacity planning is conducted so that the necessary capacity exists during contingency operations for environmental support.
Contingency planning policy
procedures addressing contingency operations for the system
contingency plan
capacity planning documents
system security plan
other relevant documents or records
Organizational personnel with contingency planning and plan implementation responsibilities
organizational personnel responsible for capacity planning
organizational personnel with information security responsibilities