Expanding the scope of technology recovery testing and how to overcome potential roadblocks

Abstract

This paper examines common practices for technology recovery and the inherent flaws in the testing methodology of many IT areas. For many companies, satisfying auditors is the primary goal of technology recovery testing. Identifying ways to expand testing to improve the chances of recovering critical functions during an actual event is difficult if stakeholders are complacent with the current status. This report describes how to expand technology recovery testing for organisations and identify/address roadblocks that prevent many organisations reaching the next level of 'maturity'. How an organisation approaches technology recovery testing depends on the type of business and the overall culture within the organisation; for example, IT management in non-profit organisations has a completely different focus from that in organisations with a more independent IT area or in companies where the business areas directly fund IT. Expanding technology recovery requires the involvement of auditors, the business client and IT. Knowing what motivates each group and identifying how improving resiliency helps each of the areas (and the overall company) are the keys to real change. This paper will look at techniques to improve the IT recovery process while expanding the people involved in it.