Recovery & business continuity

Disaster recovery self-assessment.

If your systems went down today, what would it take to get back to work? Review your recovery plan and get practical next steps for your business and IT team.

20–38 questions, tailored to your framework, environment and answers · no account required · PDF without contact details

NIST-based business recovery planning

Adapted from NIST SP 800-34 Rev. 1's contingency planning process, with NIST CSF 2.0 Recover outcomes. A business planning aid, not an official NIST assessment or certification.

Start with business impact and recovery targets, then protect recovery data, document runbooks and prove recovery through exercises.

  1. Planning & ownership
  2. Business impact analysis
  3. Preventive controls
  4. Recovery strategies
  5. Recovery runbooks
  6. Testing & exercises
  7. Plan maintenance

Set your recovery context

Choose your planning framework

Not sure? NIST is our starting recommendation for IT recovery; none of these reviews certifies compliance.

Company type (optional)
How many people work in your organization? (optional)
Environment
Critical services (optional)

Select all that apply.

Business impact of an outage (optional)

Select all that apply. Choices are tailored to your company type and environment.

Acceptable downtime (RTO)

How long can your most critical service be unavailable?

What this means: Without a target, recovery speed is left to chance; we assume about two working days of disruption.

Select how many people work in your organization above to see the dollar cost of this downtime.

Acceptable data loss (RPO)

How much recent work could you afford to lose?

What this means: Without a target, backup frequency drifts; we assume a day of lost work.

Select how many people work in your organization above to see the dollar cost of this data loss.

Select how many people work in your organization to estimate the salary and overtime cost of an outage.