| 💼 A1.1 The entity maintains, monitors, and evaluates current processing capacity and use of system components to manage capacity demand and to enable the implementation of additional capacity to help meet its objectives. | 3 | | | |
| 💼 A1.1-1 Measures Current Usage | | | | |
| 💼 A1.1-2 Forecasts Capacity | | | | |
| 💼 A1.1-3 Makes Changes Based on Forecasts | | | | |
| 💼 A1.2 The entity authorizes, designs, develops or acquires, implements, operates, approves, maintains, and monitors environmental protections, software, data backup processes, and recovery infrastructure to meet its objectives. | 10 | | | |
| 💼 A1.2-1 Identifies Environmental Threats | | | | |
| 💼 A1.2-2 Designs Detection Measures | | | | |
| 💼 A1.2-3 Implements and Maintains Environmental Protection Mechanisms | | | | |
| 💼 A1.2-4 Implements Alerts to Analyze Anomalies | | | | |
| 💼 A1.2-5 Responds to Environmental Threat Events | | | | |
| 💼 A1.2-6 Communicates and Reviews Detected Environmental Threat Events | | | | |
| 💼 A1.2-7 Determines Data Requiring Backup | | | | |
| 💼 A1.2-8 Performs Data Backup | | | | |
| 💼 A1.2-9 Addresses Offsite Storage | | | | |
| 💼 A1.2-10 Implements Alternate Processing Infrastructure | | | | |
| 💼 A1.3 The entity tests recovery plan procedures supporting system recovery\ \ to meet its objectives. | 2 | | | |
| 💼 A1.3-1 Implements Business Continuity Plan Testing | | | | |
| 💼 A1.3-2 Tests Integrity and Completeness of Back-Up Data | | | | |