A.10.3 System planning and acceptance

Objective: To minimize the risk of systems failures.

A.10.3.1 Capacity management

Control

The use of resources shall be monitored, tuned, and projections made of future capacity requirements to ensure the required system performance.

A.10.3.2 System acceptance

Control

Acceptance criteria for new information systems, upgrades, and new versions shall be established and suitable tests of the system(s) carried out during development and prior to acceptance.