The organization should have policies describing the monitoring and reporting requirements. Where electronic systems are used for monitoring and reporting, the policies should describe the redundancy measures required and implemented to ensure fail-safe operations. The reporting requirements should at a minimum be aligned with the service levels the organization has committed to its customers. It should also define the reports the organization should receive in order to guarantee its own service delivery to its customers.
