
Verified recovery
Test clean backups and key customer journeys after restoration. Set monitoring and ownership for later signs of recurrence. Test the important customer action before publishing a change.
Review accounts, permissions, authentication, unused software, and public interfaces. Remove access that no longer serves a business need. Explain any licensing or platform limits before delivery.
- A written brief
- Named responsibilities
- Agreed review points




