Security Governance.
monitoring is maintained throughout the recovery process Duration of gap in auditing or monitoring for [mission-critical resource, non-mission-critical resource] during recovery. Change Management Mean-time to Complete Changes Percent of Changes with Security Review Percentage of Changes with