#iso27001/2013
# ISO 27001 A 17 Information security aspects of business continuity management

## A 17.1 Information security continuity
Objective: Information security continuity shall be embedded in the organization’s business continuity management systems.

### A 17.1.1 Planning information security continuity
The organization shall determine its requirements for information security and the continuity of information security management in adverse situations, e.g. during a crisis or disaster.

### A 17.1.2 Implementing information security continuity
The organization shall establish, document, implement and maintain processes, procedures and controls to ensure the required level of continuity for information security during an adverse situation.

### A 17.1.3 Verify, review and evaluate information security continuity
The organization shall verify the established and implemented information security continuity controls at regular intervals in order to ensure that they are valid and effective during adverse situations.


## A 17.2 Redundancies
Objective: To ensure availability of information processing facilities.

### A 17.2.1 Availability of information processing facilities
Information processing facilities shall be implemented with redundancy sufficient to meet availability requirements.

