ISO 27001 A 5.30 ”ICT readiness shall be planned, implemented, maintained and tested based on business continuity objectives and ICT continuity requirements.”