Details.
Management-level handling of security and business continuity, including a formalised backup policy, disaster recovery plan, prioritised measures for identities, remote access and workstations, management awareness of information system risks and tracking of security actions in committee meetings.