A business recovery plan for major incidents, and other business compliance measures for specific scenarios, operational emergencies and health and safety, are in place and are regularly updated and tested.