set of policies, tools and procedures to enable the recovery or continuation of vital technology infrastructure and systems following a natural or human-induced disaster, focusing on the IT or technology systems supporting critical business functions