6. A SIPS operator shall establish a business continuity plan that addresses events posing a significant risk of disrupting the SIPS’ operations. The plan shall include the use of a secondary site and be designed to ensure that critical information technology systems can resume operations within two hours of those events. The plan shall be designed in such a way that the SIPS is always able to settle all payments due by the end of the business day on which the disruption occurs. The SIPS operator shall test the plan and review it at least annually.