Contingency Planning

The institution shall ensure that backup copies of data, software and system images are regularly made and tested. 

 The institution shall establish, maintain, and effectively implement plans for emergency response, backup operations, and post-disaster recovery for institutional information systems to ensure the availability of critical information resources and continuity of operations in emergency situations.