Requirement
"ICT readiness shall be planned, implemented, maintained and tested based on business continuity objectives and ICT continuity requirements."[1]
Explanation
Organizations should ensure the availability of their information system during a disruption. This starts with the performance of a business impact analysis (BIA). The BIA helps determine which business activities s are the most important for the organization and which resources are needed to keep them running during a disruption. Recovery time objectives should be identified for these activities along with recovery point objectives for information system components. An information system contingency plan should be developed approved by management and periodically tested.
