Keep it running · RES-01
Business Continuity & Disaster Recovery
When the data centre floods or ransomware locks everything, you'll already know what to do.
Business impact analysis, continuity plans, disaster recovery architecture and the drills that prove they work. We design for the failures Nigerian organisations actually face: grid outages, fibre cuts, ransomware, single points of failure in one building, and vendors who go dark.
What's included
Pick what you need. We'll tell you what you've missed.
Business impact analysis
Find out which processes matter most, how long each can be down, and set defensible RTO and RPO targets agreed by the business, not guessed by IT.
Business continuity planning
Plans for people, premises, technology and suppliers. Clear roles, call trees and workarounds that function when the usual systems don't.
Disaster recovery architecture
Secondary sites, cloud DR, replication and failover design sized to your recovery targets and budget. Active-passive, pilot light or warm standby.
Backup & ransomware resilience
Immutable, offline and tested backups. The 3-2-1-1-0 rule applied properly, because ransomware goes for the backups first.
DR testing & failover drills
Planned failovers with measured recovery times. We record what actually happened against what the plan promised.
Tabletop & crisis exercises
Facilitated scenarios for executives: ransomware, a regulator calling, a data leak trending online. Decisions get made under pressure before the real thing.
ISO 22301 implementation
A full business continuity management system, from policy to certification readiness.
Crisis communications
Pre-approved statements, stakeholder maps and channels for customers, staff, regulators and press when things go wrong.
How it runs
The process.
- 1
Analyse
BIA and risk assessment to find critical processes, dependencies and single points of failure.
- 2
Strategise
Choose recovery strategies that meet targets at a cost the business accepts.
- 3
Build
Plans, runbooks and DR infrastructure put in place and documented.
- 4
Exercise
Tabletops and live failovers. Real timings recorded, gaps logged.
- 5
Maintain
Plans reviewed after every change, exercise and incident. Tested at least annually.
What you walk away with
Deliverables.
- Business impact analysis with agreed RTO/RPO per process
- Business continuity plans per department and site
- DR runbooks detailed enough for someone who has never seen the system
- DR test reports with measured vs. target recovery times
- Exercise after-action reports and improvement tracker
- ISO 22301 gap assessment and roadmap
FAQ
Questions we get asked.
What's the difference between BCP and DR?
Disaster recovery restores technology: systems, data, networks. Business continuity keeps the organisation operating, which includes people, premises, suppliers and manual workarounds while IT recovers. You need both.
We back up daily. Isn't that enough?
Only if those backups are isolated from ransomware, regularly restored as a test, and fast enough to meet your recovery targets. Many organisations discover during an incident that restores take days, not hours.
Can our DR site be in the cloud?
Often, yes, and it's usually cheaper than a second physical data centre. We'll check data residency and regulatory constraints first, including CBN and NDPA requirements.
Often paired with
Cloud, Infrastructure & DevSecOps
Infrastructure that scales, stays up, and doesn't hand an attacker the keys.
Penetration Testing & Red Teaming
We attack your systems the way a real adversary would. With permission, and a report you can act on.
Managed Detection & Incident Response
Someone watching your logs at 3am. And a team ready to move when the alert is real.
Let's talk about BCM / DR.
Send a few lines on what you need and when. You'll get a reply from a practitioner, not a sales rep, within one working day.