Entity has documented Disaster Recovery Policy, that establish guidelines and procedures on continuing business operations in case of a disruption or a security incident