
Verified recovery
Test clean backups and key customer journeys after restoration. Set monitoring and ownership for later signs of recurrence. Confirm that forms, phone links, and replies reach the right person.
Review accounts, permissions, authentication, unused software, and public interfaces. Remove access that no longer serves a business need. Keep account ownership with the business.
- A written brief
- Named responsibilities
- Agreed review points




