Documenting disaster recovery risks in agency risk registers, along with controls and treatment plans. SrcNUM Recommendation 10 RecCODE 33 INQref INQ313