PR.IR-01 Network protection and segmentation
Protecting networks and environments from unauthorized logical access: segmentation by trust boundary and platform type, filtering external traffic, zero trust architecture and endpoint health checks.
PR.IR Technology infrastructure resilience
Technology Infrastructure Resilience: network protection and segmentation, environmental threats, resilience mechanisms and capacity; four Subcategories.
PR.IR-02 Environmental threat protection
Protecting technology assets from environmental threats such as flooding, fire, wind, heat and humidity, including requirements for service providers that run systems for the organization.
PR.IR-03 Resilience mechanisms
Mechanisms that meet resilience requirements in normal and adverse conditions: avoiding single points of failure, load balancing and high-availability components.
PR.IR-04 Capacity management
Maintaining enough capacity for availability by monitoring storage, power, compute and network bandwidth and forecasting future needs.
