Requires plans to maintain continuity of essential state government operations and services

Requires plans to sustain or recover/restore critical operations in the event of a system disruption or disaster

Requires backup and recovery procedures for critical software and data

Adopts the NIST risk management framework