6.2 Task Statements: Design
6.2.9 Maintain the daily/weekly/monthly process of backing up IT systems to be stored both on-and off-site in the event that a restoration should become necessary.
6.2.10 Develop a plan to measure the effectiveness of security controls, processes, policies and procedures.