Under the Business Resilience and IT Recovery Project
Economic and Corporate Governance
31 December 2025
- Develop, maintain, and periodically review the Incident Response Plan.
- Develop, maintain, and periodically review the Disaster Recovery Plan (DRP).
- Perform regular data backup activities and conduct system recovery testing to ensure business continuity readiness.
- Conduct drills and simulations for cybersecurity incidents and information system disruptions.
- Establish an Incident Response Team (IRT) to effectively manage and respond to cybersecurity incidents.
- Assess and prepare for Cyber Drill exercises to strengthen the organization's cyber resilience and incident response capabilities.