Regarding information systems whose availability/integrity is level B or higher, are procedures for creating a backup for the system and data (such as those subject to backup, backup frequency, and time schedule) specified, and is the backup procedure implemented?