
Verified recovery
Test clean backups and key customer journeys after restoration. Set monitoring and ownership for later signs of recurrence. Try the main customer task on a phone before signing off.
Review accounts, permissions, authentication, unused software, and public interfaces. Remove access that no longer serves a business need. Keep account ownership with the business.
- A written brief
- Named responsibilities
- Agreed review points




