PR.IP-10: Information Protection Processes and Procedures
Response and recovery plans are tested.
PR.IP-9: Information Protection Processes and Procedures
Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed.