Business Continuity

Policies define exercise and testing expectations and strategies: key roles and responsibilities, minimum frequency, scope and reporting, consistent documentation, a process for correcting deficiencies, testing of communication and connectivity with third-part...

Guidance that the business continuity policy is kept current and available as documented information, is made known, understood and put into practice across the organization, and can be seen by the interested parties management has approved.

Set business continuity objectives and plan concretely how each of them will be achieved.

The organization should assess the current readiness of each critical ICT service against the business continuity requirements the BIA sets for it, comparing the recovery capability ICT can deliver today with the recovery time, recovery point and minimum servi...

For each critical ICT service the organization should compare its current readiness arrangements with the business continuity requirements, document the gaps, and tell top management about them and the risks they create;

Address business continuity and disaster recovery planning and resources within the program, including regular periodic testing and review of those capabilities and the controls described in the recovery paragraphs of the section.