The policy outlines responsibilities such as having appropriate resources necessary when incidents occur, setting business continuity objectives each year, conducting tabletop tests of our systems for readiness, and identifying potential events and incidents.