Standard Seven: Continuity Planning

7.1. Organisations have a defined, planned and communicated response to Data security incidents that impact sensitive information or key operational services

7.2. There is an effective test of the continuity plan and disaster recovery plan for data security incidents

7.3. You have the capability to enact your incident response plan, including effective limitation of impact on your essential service. During an incident, you have access to timely information on which to base your response decisions