Is there a Policy covering Business Continuity Management?