Business Continuity Disaster Recovery Project Management OPM3 Risk Assessment Training

Has data been successfully been synched back up to Recovery Time Objectives and Recovery Point Objectives during an exercise?

This is something that few companies (outside of banks, insurance companies, or other highly regulated companies) do well. Often, drills are considered a "success" if data can actually be recovered and someone can access it. Although everyone knows it is a major risk to avoid synchronizing data bases, no one wants to pick up that rock and look underneath. They know it will cost a lot of money and take a lot of time to do the job correctly and look at this as a cost to manage down.

Are your recovery instructions detailed enough to allow a contractor from another company to restore your systems without having ever seen them?

If your recovery plan depends on a few superstars to recover your systems, you have a weak plan! You should plan on all of your staff being dead or incapacitated. Your recovery plans should be clear enough that a qualified stranger should be able to pick up a plan and successfully follow it.

Are new applications or processes routinely assessed for their impact to your Business Continuity or Disaster Recovery plans?

Every single new application or process that is introduced in your company should be assessed for its impact to your recovery plans. This should be incorporated into how your projects are managed and reviewed before projects are approved. This is a key role of a Project Management Office.