RESPONSIBILITIES OF MANAGMENT
The healthcare organization's management will:Assess the criticality of each business operation and associated information processing service and determine the risk to the business of their delay or loss.
Complete a business impact analysis.
Contain and/or manage the risks in accordance with this policy.
Prepare and keep current business continuity plans commensurate with the level of risk.
Insure that the business continuity plans are tested on schedule.
The Audit Division is responsible for concurring that:
Risks appear to be properly dimensioned.
Containment measures selected appear adequate.
Business continuity plans appear adequate and commensurate with risk.
Testing has been successfully conducted at least once annually.
The plans are being maintained.