ISO 27001 A.5.29 / A.5.30 — Business Continuity & DR Planning

Define and maintain BC/DR plans with RTO/RPO targets, crisis teams, and activation criteria. Schedule and record test exercises (tabletop, simulation, full interruption) to verify plan effectiveness.