For organisations / continuity
The backup exists. Can it restore the business?
A green backup status does not tell you when operations will return or whether the right access and knowledge will be available.
Situation
Recovery fails in the gaps between data, access, dependencies and decisions.
Missing accounts, unknown dependencies, inaccessible documentation or optimistic timing can make a healthy backup useless during an incident.
The assessment connects technical capability with the order in which the organisation truly needs its services back.
Who it is for
For organisations that back up data but have not verified recovery as a whole.
- A supplier runs backups but recovery ownership is unclear
- RTO and RPO are estimates or do not exist
- File restore works but full service recovery is not tested
- Keys, accounts or documentation share the same failure domain
Scope
Preparedness for the day normal operations no longer apply.
The objective is not a dangerous production exercise. We first verify the recovery chain, decisions and a safe test method.
Critical services
Business priority and the restoration order of systems and dependencies.
RTO and RPO
Realistic recovery-time and data-loss objectives.
Backup chain
Copies, isolation, retention, encryption and compromise protection.
Emergency access
Accounts, keys, documents and contacts available outside the incident.
Runbook
Who decides, who acts and how the result is verified.
Recovery test
A safe practical scenario and evidence of the result.
Process
From business priority to verified recovery.
Impact
Determine what the organisation must restore first.
Chain
Review data, systems, access and dependencies.
Exercise
Walk through a scenario and safely test a selected recovery.
Runbook
Leave clear steps, owners and follow-up actions.
Important boundary
A test must reduce risk, not create more.
No destructive or production recovery is performed without a separately approved plan, rollback and accountable owners.
Next step
Do you know what you would restore first?
A short conversation usually shows whether the missing element is technology, procedure or a management decision.