Backup coverage is consistently reviewed to ensure no critical data is excluded
This process control reviews backup scope on a recurring basis so every critical system is genuinely being backed up, the kind of compliance check A.5.36 expects across technical domains.
The process facet reviews backup scope on a recurring basis, confirming that no critical system has drifted out of the coverage A.8.13's policy leg committed to.