cm/controlmapping
Sources
NIST CSF 2.0 · Protect (PR)
PR.IR-04

Adequate resource capacity to ensure availability is maintained

frameworkNIST Cybersecurity Framework 2.0 sectionProtect (PR) topics— frameworks0 0 3 10
gap from NIST CSF 2.0 → gap to NIST CSF 2.0 →

Wrong or missing mapping? Report it

Equivalents of PR.IR-04 in other frameworks
FrameworkRequirementTitleLinkSource / reason
ISO 27001A.8.6Capacity managementLoosely relatedNo mapping. Only shares CSF PR.IR-04: related, not a mapping
CIS v8.1—No requirementNo mapping in our dataNo mapping in our data (most CIS links are editorial: CIS's published crosswalk covers 49 of 153 safeguards).
SOC 2—No requirementNo mapping in our dataNo mapping in our data (SOC 2 links are editorial only).
PCI DSS—No requirementNo mapping in our dataNo mapping in our data.
CMMC—No requirementNo mapping in our dataNo mapping in our data.
800-53CP-6CP-7CP-8PM-3Alternate Storage Site; Alternate Processing Site…Loosely relatedNo mapping. Only shares CSF PR.IR-04: related, not a mapping
+1 more loosely related (not mappings)
PM-9 Risk Management Strategy Loosely related
Only shares CSF PR.IR-04: related, not a mapping
HIPAA§164.308(a)(7)(ii)(A)§164.308(a)(7)(ii)(B)§164.310(a)(2)(i)Data Backup Plan; Disaster Recovery Plan…Loosely relatedNo mapping. Only shares CSF PR.IR-04: related, not a mapping
GDPR—No requirementNo mapping in our dataNo mapping in our data (only GDPR's security articles are mapped, editorially).
NIS2—No requirementNo mapping in our dataNo mapping in our data.
Essential Eight—No requirementNo mapping in our dataNo mapping in our data (Essential Eight links are editorial only).
DORA—No requirementNo mapping in our dataNo mapping in our data (DORA links are editorial, and its technical standards are not mapped).
CPS 234—No requirementNo mapping in our dataNo mapping in our data (CPS 234 is principles-based and its links are editorial).
Cyber Essentials—No requirementNo mapping in our dataNo mapping in our data (Cyber Essentials covers five technical controls only).

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.