Autoscaling is the automatic adjustment of cloud resources (e.g., compute instances, containers, storage) to current demand. Resources are added when load increases and reduced when it decreases.
In an ISMS, autoscaling is relevant to availability (ISO 27001 Annex A control A.8.14 — Redundancy) and capacity management. Properly configured, it protects against overload and outages during traffic spikes. At the same time, uncontrolled autoscaling carries cost risks and can become an attack target (e.g., through deliberately generated traffic) if no upper limits are set. Always configure upper and lower bounds, monitor scaling events, and account for autoscaling in your cost planning.