Establishes the processes for managing IT operations, services, and infrastructure security, ensuring operational stability and security.
Focuses on operational tasks including capacity and performance planning, system maintenance, and infrastructure management to support business continuity.
IT operations teams are overwhelmed by change volume, struggling to maintain service stability while keeping pace with business demands and security requirements.
| Control ID | Control Name | Category & Type | Criticality | Status | Requirements | Action |
|---|---|---|---|---|---|---|
| OPS-001 | Change & Release Management Establishes change and release managemen... |
Operational
Detective
|
High | Active | 📋 10 Reqs | View → |
| OPS-002 | Operational Monitoring & Service Health Establishes operational monitoring inclu... |
Operational
Detective
|
High | Active | 📋 10 Reqs | View → |
| OPS-003 | Service Availability Management Establishes service availability managem... |
Operational
Detective
|
High | Active | 📋 10 Reqs | View → |
| OPS-004 | Capacity & Performance Management Establishes capacity and performance man... |
Operational
Detective
|
High | Active | 📋 10 Reqs | View → |
| OPS-005 | System Maintenance Management Establishes system maintenance including... |
Operational
Detective
|
High | Active | 📋 10 Reqs | View → |
| OPS-006 | End-of-Life & Technology Lifecycle Management Establishes end-of-life management inclu... |
Operational
Detective
|
High | Active | 📋 10 Reqs | View → |
| OPS-007 | Batch Processing & Job Management Establishes batch processing and job man... |
Operational
Corrective
|
Medium | Active | 📋 10 Reqs | View → |
The following requirements dictate specific audit evidence criteria and testing steps mapped directly under the controls of this domain.
| REQUIREMENT ID | REQUIREMENT TITLE & DETAILS | MAPPED CONTROL | TYPICAL OWNER | ACTION |
|---|---|---|---|---|
| OPS-001-R001 | Change Management Framework The organization shall establish a chang... | OPS-001 Change & Release Management | IT Operations, Change Manager, Release Manager, CISO | View ↗ |
| OPS-001-R002 | Change Request Management The organization shall manage change req... | OPS-001 Change & Release Management | IT Operations, Change Manager, Release Manager, CISO | View ↗ |
| OPS-001-R003 | Change Risk Assessment The organization shall conduct risk asse... | OPS-001 Change & Release Management | IT Operations, Change Manager, Release Manager, CISO | View ↗ |
| OPS-001-R004 | Change Approval The organization shall approve changes,... | OPS-001 Change & Release Management | IT Operations, Change Manager, Release Manager, CISO | View ↗ |
| OPS-001-R005 | Release Planning The organization shall plan releases, en... | OPS-001 Change & Release Management | IT Operations, Change Manager, Release Manager, CISO | View ↗ |
| OPS-001-R006 | Release Deployment The organization shall deploy releases i... | OPS-001 Change & Release Management | IT Operations, Change Manager, Release Manager, CISO | View ↗ |
| OPS-001-R007 | Post-Implementation Review The organization shall conduct post-impl... | OPS-001 Change & Release Management | IT Operations, Change Manager, Release Manager, CISO | View ↗ |
| OPS-001-R008 | Emergency Changes The organization shall manage emergency... | OPS-001 Change & Release Management | IT Operations, Change Manager, Release Manager, CISO | View ↗ |
| OPS-001-R009 | Change Reporting The organization shall report on change... | OPS-001 Change & Release Management | IT Operations, Change Manager, Release Manager, CISO | View ↗ |
| OPS-001-R010 | Continuous Improvement The organization shall establish a conti... | OPS-001 Change & Release Management | IT Operations, Change Manager, Release Manager, CISO | View ↗ |
| OPS-002-R001 | Operational Monitoring Framework The organization shall establish an oper... | OPS-002 Operational Monitoring & Servi... | IT Operations, Security Operations, NOC, Service Owners | View ↗ |
| OPS-002-R002 | Health Monitoring The organization shall monitor the healt... | OPS-002 Operational Monitoring & Servi... | IT Operations, Security Operations, NOC, Service Owners | View ↗ |
| OPS-002-R003 | Performance Monitoring The organization shall monitor system pe... | OPS-002 Operational Monitoring & Servi... | IT Operations, Security Operations, NOC, Service Owners | View ↗ |
| OPS-002-R004 | Alert Management The organization shall manage alerts gen... | OPS-002 Operational Monitoring & Servi... | IT Operations, Security Operations, NOC, Service Owners | View ↗ |
| OPS-002-R005 | Event Monitoring The organization shall monitor operation... | OPS-002 Operational Monitoring & Servi... | IT Operations, Security Operations, NOC, Service Owners | View ↗ |
| OPS-002-R006 | Operational Dashboards The organization shall develop and maint... | OPS-002 Operational Monitoring & Servi... | IT Operations, Security Operations, NOC, Service Owners | View ↗ |
| OPS-002-R007 | Monitoring Review The organization shall conduct periodic... | OPS-002 Operational Monitoring & Servi... | IT Operations, Security Operations, NOC, Service Owners | View ↗ |
| OPS-002-R008 | Monitoring Reporting The organization shall report on operati... | OPS-002 Operational Monitoring & Servi... | IT Operations, Security Operations, NOC, Service Owners | View ↗ |
| OPS-002-R009 | Escalation Management The organization shall escalate operatio... | OPS-002 Operational Monitoring & Servi... | IT Operations, Security Operations, NOC, Service Owners | View ↗ |
| OPS-002-R010 | Continuous Improvement The organization shall establish a conti... | OPS-002 Operational Monitoring & Servi... | IT Operations, Security Operations, NOC, Service Owners | View ↗ |
| OPS-003-R001 | Availability Framework The organization shall establish a servi... | OPS-003 Service Availability Managemen... | IT Operations, Service Owners, Business Continuity, Service Management | View ↗ |
| OPS-003-R002 | Availability Objectives The organization shall define availabili... | OPS-003 Service Availability Managemen... | IT Operations, Service Owners, Business Continuity, Service Management | View ↗ |
| OPS-003-R003 | Service Availability Monitoring The organization shall monitor the avail... | OPS-003 Service Availability Managemen... | IT Operations, Service Owners, Business Continuity, Service Management | View ↗ |
| OPS-003-R004 | Availability Risk Assessment The organization shall conduct risk asse... | OPS-003 Service Availability Managemen... | IT Operations, Service Owners, Business Continuity, Service Management | View ↗ |
| OPS-003-R005 | Availability Reporting The organization shall report on service... | OPS-003 Service Availability Managemen... | IT Operations, Service Owners, Business Continuity, Service Management | View ↗ |
| OPS-003-R006 | Service Restoration The organization shall restore services... | OPS-003 Service Availability Managemen... | IT Operations, Service Owners, Business Continuity, Service Management | View ↗ |
| OPS-003-R007 | Availability Review The organization shall conduct periodic... | OPS-003 Service Availability Managemen... | IT Operations, Service Owners, Business Continuity, Service Management | View ↗ |
| OPS-003-R008 | Availability Testing The organization shall regularly test av... | OPS-003 Service Availability Managemen... | IT Operations, Service Owners, Business Continuity, Service Management | View ↗ |
| OPS-003-R009 | SLA Monitoring The organization shall monitor complianc... | OPS-003 Service Availability Managemen... | IT Operations, Service Owners, Business Continuity, Service Management | View ↗ |
| OPS-003-R010 | Continuous Improvement The organization shall establish a conti... | OPS-003 Service Availability Managemen... | IT Operations, Service Owners, Business Continuity, Service Management | View ↗ |
| OPS-004-R001 | Capacity Management Framework The organization shall establish a capac... | OPS-004 Capacity & Performance Managem... | IT Operations, Infrastructure Engineering, Cloud Operations, Service Owners | View ↗ |
| OPS-004-R002 | Capacity Planning The organization shall conduct capacity... | OPS-004 Capacity & Performance Managem... | IT Operations, Infrastructure Engineering, Cloud Operations, Service Owners | View ↗ |
| OPS-004-R003 | Performance Monitoring The organization shall monitor system pe... | OPS-004 Capacity & Performance Managem... | IT Operations, Infrastructure Engineering, Cloud Operations, Service Owners | View ↗ |
| OPS-004-R004 | Workload Forecasting The organization shall forecast workload... | OPS-004 Capacity & Performance Managem... | IT Operations, Infrastructure Engineering, Cloud Operations, Service Owners | View ↗ |
| OPS-004-R005 | Resource Optimization The organization shall optimize resource... | OPS-004 Capacity & Performance Managem... | IT Operations, Infrastructure Engineering, Cloud Operations, Service Owners | View ↗ |
| OPS-004-R006 | Auto-Scaling Management The organization shall manage auto-scali... | OPS-004 Capacity & Performance Managem... | IT Operations, Infrastructure Engineering, Cloud Operations, Service Owners | View ↗ |
| OPS-004-R007 | Capacity Reporting The organization shall report on capacit... | OPS-004 Capacity & Performance Managem... | IT Operations, Infrastructure Engineering, Cloud Operations, Service Owners | View ↗ |
| OPS-004-R008 | Performance Review The organization shall conduct periodic... | OPS-004 Capacity & Performance Managem... | IT Operations, Infrastructure Engineering, Cloud Operations, Service Owners | View ↗ |
| OPS-004-R009 | Capacity Risk Assessment The organization shall conduct risk asse... | OPS-004 Capacity & Performance Managem... | IT Operations, Infrastructure Engineering, Cloud Operations, Service Owners | View ↗ |
| OPS-004-R010 | Continuous Improvement The organization shall establish a conti... | OPS-004 Capacity & Performance Managem... | IT Operations, Infrastructure Engineering, Cloud Operations, Service Owners | View ↗ |
| OPS-005-R001 | Maintenance Framework The organization shall establish a syste... | OPS-005 System Maintenance Management | IT Operations, Infrastructure Engineering, Application Operations, Change Management | View ↗ |
| OPS-005-R002 | Preventive Maintenance The organization shall conduct preventiv... | OPS-005 System Maintenance Management | IT Operations, Infrastructure Engineering, Application Operations, Change Management | View ↗ |
| OPS-005-R003 | Planned Maintenance The organization shall conduct planned m... | OPS-005 System Maintenance Management | IT Operations, Infrastructure Engineering, Application Operations, Change Management | View ↗ |
| OPS-005-R004 | Maintenance Scheduling The organization shall schedule maintena... | OPS-005 System Maintenance Management | IT Operations, Infrastructure Engineering, Application Operations, Change Management | View ↗ |
| OPS-005-R005 | Maintenance Validation The organization shall validate that mai... | OPS-005 System Maintenance Management | IT Operations, Infrastructure Engineering, Application Operations, Change Management | View ↗ |
| OPS-005-R006 | Maintenance Documentation The organization shall maintain comprehe... | OPS-005 System Maintenance Management | IT Operations, Infrastructure Engineering, Application Operations, Change Management | View ↗ |
| OPS-005-R007 | Maintenance Reporting The organization shall report on mainten... | OPS-005 System Maintenance Management | IT Operations, Infrastructure Engineering, Application Operations, Change Management | View ↗ |
| OPS-005-R008 | Maintenance Review The organization shall conduct periodic... | OPS-005 System Maintenance Management | IT Operations, Infrastructure Engineering, Application Operations, Change Management | View ↗ |
| OPS-005-R009 | Maintenance Exception Management The organization shall manage exceptions... | OPS-005 System Maintenance Management | IT Operations, Infrastructure Engineering, Application Operations, Change Management | View ↗ |
| OPS-005-R010 | Continuous Improvement The organization shall establish a conti... | OPS-005 System Maintenance Management | IT Operations, Infrastructure Engineering, Application Operations, Change Management | View ↗ |
| OPS-006-R001 | Technology Lifecycle Framework The organization shall establish a techn... | OPS-006 End-of-Life & Technology Lifec... | IT Asset Management, IT Operations, Enterprise Architecture, Security Architecture | View ↗ |
| OPS-006-R002 | Technology Inventory Review The organization shall regularly review... | OPS-006 End-of-Life & Technology Lifec... | IT Asset Management, IT Operations, Enterprise Architecture, Security Architecture | View ↗ |
| OPS-006-R003 | End-of-Life Identification The organization shall identify technolo... | OPS-006 End-of-Life & Technology Lifec... | IT Asset Management, IT Operations, Enterprise Architecture, Security Architecture | View ↗ |
| OPS-006-R004 | Risk Assessment The organization shall conduct risk asse... | OPS-006 End-of-Life & Technology Lifec... | IT Asset Management, IT Operations, Enterprise Architecture, Security Architecture | View ↗ |
| OPS-006-R005 | Technology Replacement Planning The organization shall develop plans for... | OPS-006 End-of-Life & Technology Lifec... | IT Asset Management, IT Operations, Enterprise Architecture, Security Architecture | View ↗ |
| OPS-006-R006 | Compensating Controls The organization shall implement compens... | OPS-006 End-of-Life & Technology Lifec... | IT Asset Management, IT Operations, Enterprise Architecture, Security Architecture | View ↗ |
| OPS-006-R007 | Lifecycle Monitoring The organization shall monitor technolog... | OPS-006 End-of-Life & Technology Lifec... | IT Asset Management, IT Operations, Enterprise Architecture, Security Architecture | View ↗ |
| OPS-006-R008 | Lifecycle Reporting The organization shall report on technol... | OPS-006 End-of-Life & Technology Lifec... | IT Asset Management, IT Operations, Enterprise Architecture, Security Architecture | View ↗ |
| OPS-006-R009 | Lifecycle Review The organization shall conduct periodic... | OPS-006 End-of-Life & Technology Lifec... | IT Asset Management, IT Operations, Enterprise Architecture, Security Architecture | View ↗ |
| OPS-006-R010 | Continuous Improvement The organization shall establish a conti... | OPS-006 End-of-Life & Technology Lifec... | IT Asset Management, IT Operations, Enterprise Architecture, Security Architecture | View ↗ |
| OPS-007-R001 | Batch Processing Framework The organization shall establish a batch... | OPS-007 Batch Processing & Job Managem... | IT Operations, Application Operations, Job Scheduling Team, Data Operations | View ↗ |
| OPS-007-R002 | Job Scheduling The organization shall schedule batch jo... | OPS-007 Batch Processing & Job Managem... | IT Operations, Application Operations, Job Scheduling Team, Data Operations | View ↗ |
| OPS-007-R003 | Job Authorization The organization shall authorize batch j... | OPS-007 Batch Processing & Job Managem... | IT Operations, Application Operations, Job Scheduling Team, Data Operations | View ↗ |
| OPS-007-R004 | Job Execution Monitoring The organization shall monitor batch job... | OPS-007 Batch Processing & Job Managem... | IT Operations, Application Operations, Job Scheduling Team, Data Operations | View ↗ |
| OPS-007-R005 | Batch Failure Management The organization shall manage batch job... | OPS-007 Batch Processing & Job Managem... | IT Operations, Application Operations, Job Scheduling Team, Data Operations | View ↗ |
| OPS-007-R006 | Batch Logging The organization shall maintain comprehe... | OPS-007 Batch Processing & Job Managem... | IT Operations, Application Operations, Job Scheduling Team, Data Operations | View ↗ |
| OPS-007-R007 | Batch Reporting The organization shall report on batch p... | OPS-007 Batch Processing & Job Managem... | IT Operations, Application Operations, Job Scheduling Team, Data Operations | View ↗ |
| OPS-007-R008 | Batch Review The organization shall conduct periodic... | OPS-007 Batch Processing & Job Managem... | IT Operations, Application Operations, Job Scheduling Team, Data Operations | View ↗ |
| OPS-007-R009 | Batch Recovery The organization shall recover from batc... | OPS-007 Batch Processing & Job Managem... | IT Operations, Application Operations, Job Scheduling Team, Data Operations | View ↗ |
| OPS-007-R010 | Continuous Improvement The organization shall establish a conti... | OPS-007 Batch Processing & Job Managem... | IT Operations, Application Operations, Job Scheduling Team, Data Operations | View ↗ |
| Framework Code | Framework Name & Description | Family / Category | Version | Action |
|---|---|---|---|---|
| MAPPED | ITIL Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| MAPPED | ISO 20000 Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| MAPPED | COBIT (APO10 Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| MAPPED | APO11) Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| MAPPED | NIST SP 800-34 Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| NIST-CSF | NIST CSF (PR.IP) The NIST Cybersecurity Framework provide... |
NIST
Framework
|
v2 | View → |
| MAPPED | CMMI Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |
| MAPPED | Six Sigma Crosswalk regulatory baseline mapped under ASPIA UCL. | Standard | Baseline | — |