PF01 - Minimum technical specifications and capacity

Description of the control

Document the minimum technical characteristics (client workstations, network, servers) required to keep the PST running properly for the expected number of users, backed by supporting evidence (structuring documents, load-test report, etc.).

What this control corresponds to

This control asks for a clear technical spec sheet of the hardware and network prerequisites needed for the application to run correctly, scaled to the expected number of concurrent users at a given facility - from a small clinic to a large service centre.

Why this control is important

Without documented specs, a facility can deploy the PST on undersized infrastructure, causing slowdowns or outages that affect clinical care - a direct risk to patient safety and service continuity. The Certification Office needs to verify the vendor actually measured, not just estimated, capacity needs.

How to implement it

• Run a representative load test (concurrent users, data volume) and record the results.
• Document server prerequisites (CPU, RAM, storage), network requirements (bandwidth, latency), and client workstation specs by user tier (e.g. 50, 200, 1000 users).
• Keep the document current with every major change affecting performance (new feature, architecture change).

How to verify it’s in place

• Request the load-test report and confirm it covers a scenario close to the target facility’s actual volume.
• Confirm the documented specs match the environment actually deployed at the customer site.
• Check the document’s last-updated date against the current PST version.