The organisation backs up user-level information on defined components, system-level information and system documentation, including security and privacy documentation, at frequencies consistent with recovery objectives, and protects the confidentiality, integrity and availability of backups. Canada-specific addition: the organisation sets retention periods for essential business information and archived backups. 8 enhancements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.