Requirement:

The asset owner shall have policies and procedures related to employing and keeping current a site disaster recovery plan (DRP), business continuity plan (BCP) or both, that includes disaster scenarios, failure handling procedures and processes for maintaining the required level of operational continuity.

Guidance: