KR eCampusCourses coming soon

KR ECAMPUS

Choose your country

Select your country to switch to the right eCampus site.

My eCampus

Back to courses

Advanced · Self-paced learning

Managing Business Recovery After a Cyberattack

Inquiry This course is not yet bookable.

After a cyberattack, several business processes need to resume. Develop a recovery plan with a sequence, release conditions and fallback routes. In the case, revise the sequence when data has been manipulated.

In the case, the ordering system is running again, but the integrity of recent orders has not been checked. The same specialists are also needed to restore warehouse data. Compare postponement with a minimum service using verified data, allocate the available specialists and identify who authorises release. If checks reveal manipulated data, keep the affected records blocked and revise the sequence.

Work with your own case or the supplied example and take away your recovery plan and release and fallback checklists. Use them to prepare recovery with business, IT and continuity teams; actual technical and operational authorisations remain with the accountable roles.

What you will work on

  • You establish a defensible sequence for resuming critical business processes and justify it through business impact, dependencies and available evidence.
  • You distinguish technical restoration, business release and escalation, and assign decision rights and deputies in a traceable way.
  • You correct the recovery sequence when data has not been approved for use.

Who it is for

  • Senior managers with operational responsibility
  • Heads of IT and business continuity
  • Crisis team and business-unit leaders

Topics

  • Critical business processes, business impact and tolerable interruption
  • Dependencies on systems, data, service providers and people
  • Decision rights across senior management, IT operations, security, forensics, business continuity and business units
  • Controlled return: technical readiness, business authorisation, rollback and escalation
  • Testing assumptions and evidence gaps when incident information is incomplete
  • Executive decision brief, review date and handover into ongoing operations

Your result

Your recovery plan records the process sequence, minimum-service and release conditions, and fallback routes. Use the completed version to prepare recovery with IT, continuity and business teams.

Prerequisites

Experience in IT operations, business continuity, risk or business-unit leadership, with access to process, system and supplier information. A structured substitute case can be used when such information is unavailable. Detailed forensic or legal expertise is not required.

Format and approach

Planned: 5–6 hours of digital self-study, with templates and self-checks. Recovery planning uses a document-based case.

Planned learning time: 5–6 hours

Enquire about this course

Advanced · Self-paced learning

Business Continuity Essentials for Managers

Create a first continuity plan for a critical process in your organisation. Define the minimum service needed during a disruption, its dependencies and the steps for recovery. The plan records responsibilities, assumptions and open decisions for discussion with the process owner.

Read the description

Advanced · Self-paced learning

IT Disaster Recovery Management

IT recovery objectives need to match business requirements and provider capabilities. Develop a recovery plan for one IT service: what comes first, what does the service depend on, who approves its use and how will recovery be tested? Use it to prepare discussions with IT leadership, business teams and continuity management.

Read the description