Risk based decisions during planning of Operational activities will define the activities for:
- Frequency and procedure for backup / restore and archiving / retrieval
- Disaster recovery
- Security
- Change Control
- Periodic review
Decisions are based on nature and complexity of the system and risk priorities.