Contingency/business recovery plans are assigned to a responsible officer. Business recovery and contingency plans are tested and reviewed on an annual basis. Business recovery and contingency plans are formally documented. Services are architected for High Availability and address geographic proximity concerns. Critical, confidential, operational, etc. data is backed up and verified on a regular basis.