◇ OpenCyber Academy
Professional · Chapter 10 · English

Chapter 10 — Continuity and backups

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 10 — Continuity and backups

Lesson map

Lesson 10 published. Map, example, EX046.

flowchart TD
  N0["Learning outcomes"]
  N1["10.1 What must keep running"]
  N2["10.2 Testing restores"]
  N3["10.3 A tabletop exercise"]
  N4["10.4 Writing it down"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX046"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["10.1 What must keep running"]
  N2["10.2 Testing restores"]
  N3["10.3 A tabletop exercise"]
  N4["10.4 Writing it down"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX046"]
[Learning outcomes]
    |
    v
[10.1 What must keep running]
    |
    v
[10.2 Testing restores]
    |
    v
[10.3 A tabletop exercise]
    |
    v
[10.4 Writing it down]
    |
    v
[Worked example] --> [Exercise EX046]

Learning outcomes

You will (1) identify what must keep running; (2) check that backups can be restored; (3) rehearse a short continuity exercise.

10.1 What must keep running

Using the dependency list from chapter two, Daniel identifies three services that must return quickly: email, the accounting software and the client portal. He asks each provider how they back up data and how fast they could restore it. He learns that the cloud email service keeps deleted items only for a limited period, so a malicious deletion noticed late might not be recoverable. The firm buys a separate backup service for email and files. Ms. Ashby explains that a cloud provider keeping the service running is not the same as backing up your data.

10.2 Testing restores

Daniel asks the support company to restore a sample of files and one mailbox from the new backup service into a test area. The files restore correctly, but the mailbox restore takes six hours, longer than expected. Daniel records the time and asks whether it can be improved for urgent cases. He also checks the old file server's backup and finds it has been copying to a disk in the same room, which would be lost in a fire or flood. The support company adds an off-site copy. Ms. Ashby reminds him that an untested backup is only a hope.

10.3 A tabletop exercise

Daniel runs a one-hour exercise with Mrs. Pike, two partners and the support company. The scenario: in early January, the accounting software vendor is unavailable for three days. The group discusses what work can continue, how clients would be told and whether filing deadlines could be met. They find that nobody knows how to ask the tax authority for extra time in such a case. One partner agrees to find out and document the steps. Daniel records the decisions and gaps, and schedules the next exercise for six months later.

10.4 Writing it down

Daniel turns the decisions into a three-page continuity plan: the three key services, who to contact for each, temporary ways of working and the steps for requesting deadline extensions. He stores printed copies in both offices and one with Mrs. Pike at home. Ms. Ashby notes that the plan's main value came from the conversation that produced it, because the partners now understand the firm's weak points. She suggests reviewing it before each busy season, when staff change and suppliers may have changed their arrangements.

Worked example

Daniel adds a separate backup service, finds a six-hour mailbox restore and a backup disk in the same room, runs a vendor-outage tabletop exercise and writes a three-page continuity plan.

Synthetic case. Services, times and decisions are synthetic.

Errors and limits

Assuming a cloud provider backs up your data can leave deleted items unrecoverable.

Exercises

Continue studying — lesson 10 (chapter 10 of 12)

← Chapter 09 · Course chapter index · Chapter 11 →

Continue to the next authored lesson.