The policy outlines responsibilities such as: ensuring necessary resources are available when incidents occur; setting annual business continuity objectives; conducting tabletop tests of our systems for readiness; and identifying potential events and incidents.