Questions for your situation
Can business impact analysis consist only of questionnaire answers?
Questionnaires can provide initial information, but dependencies, conflicting times and resource requests need joint review. A four-hour sales recovery request is not feasible if its required system takes two days to restore. Assumptions, information owners and management's prioritisation decisions should be traceable.
Do tabletop exercises and technical restoration tests provide the same evidence?
Tabletop work tests understanding of roles, decisions and communication. A technical test demonstrates actual recovery of a system or resource. Select the method for the capability being examined; neither proves every outcome of the other. The exercise programme should address critical dependencies and changing risks with appropriate variety.
Can a supplier with continuity certification automatically be treated as ready in our recovery plan?
Compare certificate scope with the service used. Assess contractual capacity, recovery priority and communication commitments separately. Resources allocated to you may be unclear if many customers are affected together. Certification is one input, not a replacement for arrangements and suitable test evidence addressing your specific dependency.
Is an exercise successful if recovery time is met but data loss exceeds the target?
Service restoration time and the currency of recovered data are separate objectives. Assess results against criteria established beforehand. Even timely restoration may leave missing transactions that affect service. Record each objective's result, deficiencies and owners; a single overall success label can conceal materially different outcomes.
Is updating telephone numbers sufficient after organisational change?
Examine effects of changed roles on crisis decisions, resource use and external communication. Remove dependencies on technical knowledge or supplier relationships held only by a departing person. Show that current role holders understand and can use the plan. Significant changes may also affect exercises and certification planning.
Is a lessons-learned review needed after a real disruption?
An actual event provides valuable evidence of readiness. Review decision times, solutions activated, failed dependencies and customer effects together. The end of disruption does not mean corrective action is complete. Surveillance or renewal should trace how identified deficiencies changed plans and operating practices.