Backup doctrine (3-2-1)
Keep 3 copies, on 2 media types, with 1 offsite/immutable. Backups are encrypted and
their integrity is verified.
- RPO (max data loss) and RTO (max downtime) are defined per system.
- Maintain immutable / air-gapped copies so ransomware cannot encrypt them.
- Back up configuration and secrets (vault), not just data.
Testing restores
A backup you have never restored is a hope, not a control. Run restore drills on schedule:
- Pick a random backup set.
- Restore to an isolated environment.
- Verify integrity and that applications start.
- Record time-to-restore vs RTO.
Business continuity (ISO 22301)
| Plan | Purpose |
|---|
| BCP | Keep critical services running during disruption |
| DR | Restore IT after a major outage |
| Crisis comms | Who says what to whom |
During an outage
- Declare the severity and the IC.
- Activate the relevant BCP/DR plan.
- Communicate ETA via the status page.
- After recovery, run a post-incident review.
Test on purpose, before a real incident tests you. Quarterly DR drills beat annual plans.