IT framework and data security and business continuity plans