Back to the module/Business continuity, from a plan on a shelf to an evidenced recovery position
The point

An untested recovery plan is a statement of intent, and it fails in the way intentions fail.

A plan nobody has run

The continuity estate at an organisation with a mature-looking programme.

The continuity estate

Documented plans, how many have been exercised in the last year, and how many predate a material change

Documented plans

74

Exercised this year

19%

beyond a tabletop

Stale

31

predate a material system change

Why it matters

Four plans in five have not been exercised beyond a discussion, and a third describe an estate that has since changed. Both numbers are typical, and neither is visible from a plan count.

What supervisors moved to

Operational resilience regimes stopped asking whether a plan exists and started asking for evidence that a service can be delivered within a stated tolerance — including through the third parties it depends on. That is a question about testing, not about documentation.

Business continuity, from a plan on a shelf to an evidenced recovery position | GeneSecure