ISO 27001 5.30 ICT Readiness for Business Continuity Requirement:
"ICT readiness shall be planned, implemented, maintained and tested based on business continuity objectives and ICT continuity requirements."[1]
ISO 27001 5.30 ICT Readiness for Business Continuity Requirement Explanation:
Organizations should ensure the availability of their information system during a disruption. This starts with the performance of a business impact analysis (BIA). The BIA helps determine which business activities s are the most important for the organization and which resources are needed to keep them running during a disruption. Recovery time objectives should be identified for these activities along with recovery point objectives for information system components. An information system contingency plan should be developed approved by management and periodically tested.
References:
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you