and reports as well as a backup system and an emergency plan for recovering information stored in an electronical form; (2) determining a password to access information stored in an electronic form and

measures for prevention against, and detection of, malware and measures for recovering information systems from malware attacks; (3) back up copies of critical business information, computer operating

for operations security relating to information systems in accordance with the following criteria: (2) establish measures for prevention against, and detection of, malware and measures for recovering