Back to all 93 controls
Annex A 5.30
Organizational
A.5.30 ICT readiness for business continuity
ICT can recover within agreed times.
What good looks like
Defined RTO/RPO per critical service, tested DR plans, backups validated.
Evidence an auditor will ask for
DR plan, recovery test reports, backup restore evidence.
Document template for this control
The Business Continuity Policy template gives you auditor-ready wording that fulfils Annex A 5.30. Preview the full document before you download the editable version.