Comprehensive Identity and access management Business continuity management and integration of the response to incidents Implementation of business continuity capabilities that include, in addition to identification, the continuous testing of the suitability of the mechanisms and the definition of tools and procedures to allow a global and harmonised response to security incidents.