.png){kind=small}
Information Security Gap & Risk Assessment
Measure your maturity and risks against recognised frameworks.
Business Continuity & Disaster Recovery
Keep the business running, and recover fast when things go wrong.
ThreatGaurd helps you understand which services matter most, set realistic recovery targets, build continuity and disaster recovery plans, and test them before a real outage or ransomware attack does.
Why it matters
Disruption is a matter of when. Recovery is a matter of preparation.
Ransomware, cloud outages, supplier failures and site incidents can stop critical services without warning. Many organisations discover during the incident that backups are incomplete, plans are out of date or nobody is sure who decides what.
A business continuity and disaster recovery programme gives you clear priorities, realistic recovery targets and tested plans, so leaders can make fast, confident decisions under pressure.
-
Backups nobody has tested
Restores fail, take far longer than expected or are missing critical data when they are needed most.
-
Plans that sit on a shelf
Continuity plans are written once for an audit and no longer match how the business works today.
-
Unclear decisions in a crisis
Without agreed roles and priorities, valuable time is lost deciding what to recover first.
Recovery objectives
Two numbers every leader should know.
We help you set realistic recovery targets for each critical service, and check whether your backups, systems and plans can actually meet them.
- RPO, recovery point objective
- How much data, measured in time, you can afford to lose. It decides how often you need to back up.
- RTO, recovery time objective
- How long a service can be unavailable before the impact becomes unacceptable. It decides how fast you must recover.
| Service | Tier | RTO target | RPO target | Can you meet it? |
|---|---|---|---|---|
| Payments platform | Tier 1 | 2 hours | 5 minutes | Gap |
| Customer portal | Tier 1 | 4 hours | 15 minutes | Partial |
| Email and collaboration | Tier 2 | 8 hours | 1 hour | Meets |
| HR and payroll | Tier 3 | 3 days | 24 hours | Meets |
What we cover
Everything you need to keep operating, and recover fast.
We cover both the business and technology sides of resilience. The scope is agreed with you during scoping.
-
Business impact analysis
Understand which services matter most, and what an outage really costs.
- Critical processes, systems and dependencies
- Financial, legal and reputational impact over time
- RTO and RPO targets for each service
-
Continuity strategy and plans
How the business keeps operating when systems, sites or people are unavailable.
- Workarounds and alternative ways of working
- Business continuity plans for each team
- Supplier and third-party continuity
-
IT disaster recovery
How systems and data are restored after a failure or attack.
- Backup coverage, frequency and retention
- Recovery procedures and runbooks
- Cloud and data centre recovery options
-
Ransomware recovery readiness
Whether you could recover if attackers encrypted or deleted your data.
- Immutable and isolated backups
- Recovery of identity systems such as Active Directory
- A clean recovery and restore order
-
Crisis management and communication
How leaders make decisions and communicate during a major incident.
- Crisis team roles and escalation
- Customer, regulator and media communication
- Decision logs and backup contact methods
-
Testing and exercises
Proof that plans work before you need them.
- Tabletop exercises with leadership
- Technical recovery tests
- Lessons learned and plan updates
Methodology
Choose where to start.
We follow international resilience standards and agree the right approach with you during scoping.
-
Resilience assessment
A review of your current continuity and recovery capability, with gaps and priorities.
Best for
Understanding where you stand before investing.
-
Most common
Full BCDR programme
Business impact analysis, strategy, plans and testing, built together with your teams.
Best for
Most organisations. From analysis to tested plans.
-
Exercises and testing
Tabletop and technical exercises to test the plans you already have.
Best for
Organisations with plans that have not been tested.
Standards we follow
- ISO 22301
- ISO 22317
- ISO/IEC 27031
- NIST SP 800-34
- NIST CSF 2.0
- DORA operational resilience
How it works
From business impact analysis to tested plans, in five steps.
-
01
Analyse business impact
We identify critical services, dependencies and the impact of disruption over time, and agree RTO and RPO targets.
-
02
Assess current capability
We review backups, recovery options, plans and suppliers against those targets.
-
03
Design the strategy
We agree practical continuity and recovery strategies that match your risk appetite and budget.
-
04
Write the plans
We build clear continuity plans, recovery runbooks and crisis communication guides with your teams.
-
05
Test and improve
We run tabletop and technical exercises, then update the plans with the lessons learned.
Deliverables
Plans your teams can follow under pressure.
- Business impact analysis Critical services ranked by impact, with agreed RTO and RPO targets.
- Gap and risk report Where current backups, systems and plans cannot meet the targets.
- Business continuity plans Clear plans for each critical team, including workarounds and contacts.
- Disaster recovery runbooks Step-by-step technical recovery procedures, including ransomware scenarios.
- Exercise report What was tested, what worked, what did not, and the actions agreed.
Before
After the programme
-
Business impact analysis 20% to 100%
-
Backup and restore 55% to 90%
-
Disaster recovery runbooks 30% to 90%
-
Crisis communication 25% to 85%
-
Plan testing 10% to 90%
Average compliance
28%before,91%after the programme
Exercise result
Tier 1 systems restored within target in a ransomware recovery test
Related services
Strengthen resilience further.
-
-
Endpoint & Infrastructure Security Assessment
Protect Active Directory, servers and backups from attackers.
-
Regulatory & Privacy Compliance
Meet breach notification and resilience requirements.
-
Virtual CISO (vCISO)
Ongoing leadership to keep resilience plans current.
FAQ
Questions leaders ask about business continuity and disaster recovery
Can’t find your answer? Our team is happy to help.
What is the difference between business continuity and disaster recovery?
Business continuity is about keeping critical business activities running during a disruption, including people, processes and suppliers. Disaster recovery is the technical part: restoring systems and data. A strong programme covers both.
What are RTO and RPO?
The recovery time objective (RTO) is the maximum time a service can be unavailable. The recovery point objective (RPO) is the maximum amount of data, measured in time, that you can afford to lose. Both are set for each critical service during the business impact analysis.
Do backups alone protect us from ransomware?
Not always. Attackers often target backups and identity systems first. Backups need to be isolated or immutable and regularly tested, and paired with a plan to rebuild systems such as Active Directory in a clean order.
Do you help with ISO 22301?
Yes. Our approach follows ISO 22301 and related standards, and can prepare you for certification. Certificates themselves are issued by accredited certification bodies.
What happens in a tabletop exercise?
Leaders and key staff work through a realistic scenario, such as a ransomware attack or a site outage, step by step. It shows how decisions are made, where plans are unclear and what to improve, without touching live systems.
Will testing disrupt our operations?
Tabletop exercises do not touch live systems. Technical recovery tests are planned with your teams, often in isolated environments or agreed maintenance windows, to avoid disruption.
How long does a BCDR programme take?
A resilience assessment usually takes 2 to 4 weeks. A full programme, from business impact analysis to tested plans, typically runs over several months, depending on the size of your organisation and the number of critical services.
How is the cost calculated?
Cost depends on the size of your organisation, the number of critical services and locations, and the approach you choose. After the scoping call you receive a fixed-scope proposal, so the cost is agreed before work starts.
Get started
Find out how quickly you could recover, before you have to.
Tell us about your critical services and current plans. We will come back with a clear scope and proposal, with no obligation.
What happens next
- A short scoping callWe learn your goals, environment and timelines.
- A fixed-scope proposalClear scope, approach, timeline and cost, in writing.
- Testing on your scheduleTesting starts on the agreed date, with regular updates.