9.4 INCIDENT RESPONSE AND DISASTER RECOVERY
A well-defined Incident Response Plan (IRP) ensures that security incidents are swiftly detected, reported, and resolved. In addition, a Disaster Recovery Plan (DRP) outlines the steps for system recovery in the event of a major outage or data loss.