Are the rules and/or manuals regarding any system failures and/or incidents (application software and infrastructures) documented?
Do the rules and/or manuals include the following steps: assessment of the situation, analysis of the causes, actions to take to recover the systems, and strategies to prevent failures and/or incidents from recurring?
If any, were actions taken to solve the actual system failures and/or incidents that occurred during the current period in accordance with the entity's policy described in the rules and/or manuals. Have the aforementioned steps been recorded and kept?