According to MA guidance on IT which of the following best describes a but recovery and restore processes have not been defined?