information should easily be recalled (3) Having backup system and measures for emergency situation to prevent the extended discontinuing of operation. 1.1.2 Document and Information Security Page 16 of 32