The business continuity and disaster recovery program, policies, plans and procedures should be reviewed and updated periodically, and in case of (major) change in the Member Organization's critical products, services, business functions and/or processes.
Objective
To ensure that all the business continuity documents are up to date and can be used during a disruptive incident to recover the business operations.
Control considerations
Member Organizations should establish a process for document review/update to ensure the BC documents are up-to-date, reviewed and approved.
All documents should clearly identify the last date in which the document was reviewed and approved.
