Why it matters
Power and connectivity failures can take down security controls (logging, monitoring) as easily as the main service.
How a self-led small team implements it
For cloud-hosted infrastructure, document reliance on your provider's utility redundancy rather than building your own.
What auditors expect to see
Provider SLA or redundancy documentation.
Track A.7.11 in your own Statement of Applicability — mark it applicable, log your justification, and link it to the risk that drove it.
Start your ISMS