Operational resilience
Everything I've written on operational resilience, with the research pieces first. Each one ends with something you can do on Monday.
Dealing with one of these problems yourself? I work with organizations that need answers, not another slide deck. Let's talk.
What's in a five-angle short
Most subjects here are one page with five short sections, always in this order. Each has its own colour inside the article so you can jump to the one you need.
- 1Where I'd start: the first move I'd make, and the question I'd ask before spending anything.
- 2Where plans fail: where plans on this subject usually break, and the assumption I'd test first.
- 3Beyond the jargon: what the subject actually means once the vendor language is stripped out.
- 4What good looks like: the result that would tell you it worked, and the number I'd watch.
- 5The call leaders can't dodge: the decision leadership has to own, and what it needs on the table to make it.
-
How to Prove a Ransomware Restore Is Ready for Production
Test recovery time, data loss, backup integrity and identity dependencies before returning a restored service to production after ransomware.
-
What Should You Restore First After a Cyberattack?
Build a recovery sequence around service dependencies, trusted startup paths, staffing limits and transaction barriers—not a ranked list of servers.
-
Backup integrity
I would not begin backup integrity by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scena...
-
Business continuity
I would not begin business continuity by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one sc...
-
Crisis exercises
I would not begin crisis exercises by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scena...
-
Disaster recovery
I would not begin disaster recovery by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scen...
-
Identity recovery
I would not begin identity recovery by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scen...
-
Operational dependency mapping
I would not begin operational dependency mapping by buying another platform or launching a large programme. I would find the boundary, the accountable owner,...
-
Ransomware recovery: what to restore first
Everything is down and everyone wants their system back first. The order you restore in decides how long the outage lasts and whether you get reinfected half...
-
Recovery testing
I would not begin recovery testing by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scena...
-
Resilience architecture
I would not begin resilience architecture by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and on...
-
Service restoration priorities
I would not begin service restoration priorities by buying another platform or launching a large programme. I would find the boundary, the accountable owner,...
-
Third-party continuity
I would not begin third-party continuity by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one...
-
Your Recovery Time Objective Is a Business Promise
A two-hour recovery target sounds reassuring until somebody asks what returns in two hours, whether the data is trustworthy, and who decides it is safe.
Nothing matches. Try another word, or ask me directly.