IT Policies and Auditing and testing companies will need to have written to obtain the ISO 27001 Certification

Backup and Recovery

Development of a policy and documentation that defines what a company backs up and how the backup is performed. It will also cover recovery and retention with appropriate service level agreements for critical data such as RPO and RTO.

Test backup and recovery process

A full test of all backups to ensure that they are valid and that the SLA's can be met.

Business Continuity Plan

Development of a business continuity plan to ensure operations continue in the event of a disaster or office closure.

Test business continuity plan with staff

A simulated test of the above business continuity plan across all staff to ensure the plan works and the goals can be achieved within the timeframes required.