“Backups are protected and restoration is tested.”
Scheduled encrypted backups with retention rules; restoration is exercised and logged, with documented recovery objectives.
“Customers are informed through a defined process.”
A severity matrix with contacts, templates and communication triggers. No uptime percentage is published until it is contractually backed.