Skip to content

Solution

Continuity you have actually tested

You have a business continuity plan nobody has opened since it was approved.

What is going on

Plans written to satisfy a requirement, filed, and never exercised. The first real test is the incident, which is the worst possible moment to learn the plan depends on a system that was decommissioned two years ago.

What this is designed to achieve

Plans that have been exercised, with the mitigation documentation that comes out of what the exercise exposed.

It starts with

A review of the existing plan against current reality, then a scenario designed to break it in a controlled setting.

The phases it runs through

  1. Phase 1

    Discover

    What is actually on the network?

  2. Phase 2

    Design

    What should be allowed, and who decides?

  3. Phase 5

    Sustain

    Will this still be working in a year?

How the method works

← All solutions