IT recovery objectives need to match business requirements and provider capabilities. Develop a recovery plan for one IT service: what comes first, what does the service depend on, who approves its use and how will recovery be tested? Use it to prepare discussions with IT leadership, business teams and continuity management.
Develop a recovery plan for one IT service with recovery time and data loss objectives. Record dependencies and provider commitments, and assign responsibility for technical readiness and business acceptance. Write a test instruction with success and stop criteria.
In the course case, the server starts after three hours, but recent transactions are missing and a sample order cannot be completed. Assess the test record and specify what needs correction before a retest. The course does not perform technical recovery on production systems.
What you will work on
Justify recovery time and data loss objectives for an IT service
Record dependencies, provider commitments and approval responsibilities in a recovery plan
You assess a restarted server with missing transactions for business usability.
Who it is for
IT leaders
IT service owners
Business continuity managers working with IT
Topics
Business requirements and recovery objectives
Recovery time and data loss tolerance
Service dependencies and providers
Recovery requests, technical readiness and business acceptance
Test scope, evidence and escalation
Your result
Your recovery test pack contains objectives and checks for one IT service. The worked data check helps you track missing transactions and other issues before business acceptance.
Prerequisites
Knowledge of an IT service within your area of responsibility and a basic understanding of organisational IT dependencies; authorised business requirements or a supplied replacement case.
Format and approach
Planned as six to eight hours of self-paced study with a written service plan and explanatory self-check feedback. Production systems and technical restoration tools are not required.
Use a disruption scenario to assess whether a critical service could resume within its agreed tolerance. Consider when work actually resumes as well as when the system returns.
After a cyberattack, several business processes need to resume. Develop a recovery plan with a sequence, release conditions and fallback routes. In the case, revise the sequence when data has been manipulated.
What needs to recover first after a disruption? You examine the services in an area and explain the recovery order to colleagues in operations, IT and finance. You create a business impact analysis for your organisation or a course case.