Contingency Planning

• The institution shall ensure that backup copies of data, software and system images are regularly made and tested.
• The institution shall establish, maintain, and effectively implement plans for emergency response, backup operations, and post-disaster recovery for institutional information systems to ensure the availability of critical information resources and continuity of operations in emergency situations.