Objective 4

Create a policy or procedure that addresses events such as: a disaster recovery plan, a business continuity plan, incident response policy, acceptable usage document, an information security policy, a physical security policy, assessments or troubleshooting procedures.