A backup and recovery strategy is another aspect of information protection and security planning. In the event of a system failure, good backups ensure the ability to recover data and resume business. Hardware failure, user mistakes or carelessness, intrusion by malicious hackers or willful damage by a disgruntled insider represent possible scenarios for loss of critical data. In the event of a system intrusion, good backups also preserve data for the incident handling team. A set of recent backups should be kept at a safe offsite location in case there is serious damage to building facilities. Not only is it important to keep backups, however. It is vital to test the backups to make sure that critical systems can be restored as part of a periodically tested disaster recovery and business continuance plan