The information management unit must carry out the necessary risk assessments regarding the processing of its information assets, the use of its information systems, and the continuity of its operations. Based on the risk assessment, the information management unit must:
a) Prepare contingency plans and advance preparations for disruption situations.
b) Implement other necessary measures to ensure that the processing of information assets, the use of information systems, and operations dependent on them can continue with as little disruption as possible during disturbances under normal conditions and during emergency conditions as referred to in the Emergency Powers Act (1552/2011).