What it asks for. ICT readiness should be planned, implemented, maintained and tested based on business continuity objectives and ICT continuity requirements, so that technology can be recovered in time to support critical activities.
In practice. Recovery time and recovery point objectives come from a business impact analysis and are mapped to the systems and dependencies that support each critical process. Technical recovery plans exist for those systems, and recovery is exercised regularly, including full restores from backup rather than just backup job success. Results are compared with the objectives and gaps are fixed. Evidence includes the impact analysis, recovery plans, test reports and records of follow up actions.
Common gaps. Objectives are often set by the business but never validated against what IT can actually deliver. Tests tend to cover individual servers rather than end to end services, and cloud and SaaS dependencies are frequently assumed to be resilient without evidence.