Continuity management covers backup and restore, business continuity planning and disaster recovery planning. Data, records, configuration and software are backed up to a strategy that meets the defined recovery point and recovery time objectives, stored separately, verified and monitored with failures managed; business continuity plans define alternative processes that allow the business to continue safely during a prolonged disruption and are rehearsed; and disaster recovery plans, based on a documented risk assessment of failure scenarios, define how infrastructure, applications and data are restored to the recovery objectives and are tested periodically, with shared responsibilities with service providers defined in agreements, as detailed in Appendices O9 and O10.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.