Keep systems available

Use availability to ask whether people and systems can use what they need when they need it. Connect outages, denial-of-service attacks, ransomware lockouts, and broken cloud dependencies to real operational impact.