Data capacity and information security

 The lack in the capacity of an asset (e.g., equipment, media, service, etc.) to store, process and/or transmit data affects directly the concept of information availability. This impact on availability can occur when an asset is destroyed, has an unplanned stop, or when it is required beyond the limit it can be used. 

Capacity of an asset has no direct impact on integrity and confidentiality.

For further information, please read:
- Implementing capacity management according to ISO 27001:2013 control A.12.1.3 https://advisera.com/27001academy/blog/2016/02/22/implementing-capacity-management-according-to-iso-270012013-control-a-12-1-3/
- Can ISO 27001 help your organization in a DDoS attack? https://advisera.com/27001academy/blog/2017/12/04/can-iso-27001-help-your-organization-in-a-ddos-attack/