This article provides an overview of SOX 404 control Manage Performance & Capacity.
The typical SOX 404 IT controls for Manage Performance and Capacity are outlined below.
Description: Systems are adequately maintained through the management of performance and the regular review of capacity.
Control Objective: A documented process exists and is enforced for performance management and capacity review.
- The process describes the performance management steps for the application.
- There is a documented process for reviewing automated performance alerts.
- There is a documented process for reviewing expected capacity (in line with patterns of business activity) for the foreseeable future at least annually.
- There is a documented process for reviewing problems and incidents and feeding lessons learnt back into operational processes.
For more information please contact Morland-Austin at email@example.com.