Checks / Obligations / Keep running when things go wrong
Obligation · 11 controls · 7 laws
Keep running when things go wrong
Critical services need backups, recovery plans and tested continuity.
What to put in place
Back up what matters, write and test a recovery plan, and monitor capacity.
Policy wording you can use
[your organisation] backs up critical systems and data, maintains tested business continuity and recovery plans, and monitors availability and capacity.
Prove it once
Describe or link the evidence that this is in place: the policy, the page, the document reference. It is sealed once and applied to all 10 controls here that take a yes or a document (the rest need their own number or date and are listed after).
Every control that asks for this
DORA
- DORA Art.11 - response & recovery plan
- DORA Art.11 - RTO objective set
- DORA Art.12 - backup policy recorded