Discussions on whether or not this is a service. Add it as a business security service? Then it is more of a capability perhaps? Business continuity may be more a quality attribute.