Last updated: April 29, 2026
A Pune fintech ran a “DR test” annually — they verified backups existed and could be restored in a lab environment. When ransomware hit production in February 2025, the actual failover took 14 days. RTO target: 4 hours. Reality: 336 hours. The DR plan existed; the plan didn’t reflect reality. This module covers Business Continuity and Disaster Recovery as practitioner discipline.
The mental model
BCP (Business Continuity Plan) covers everything needed to keep the business running during disruption — IT, people, facilities, third parties, communication. DR (Disaster Recovery) is the IT-specific subset — restoring systems and data after failure. They overlap but aren’t identical.
Get a free attack-surface review
We check what an attacker would see about your business — leaked credentials, exposed services, dark-web mentions. 30 minutes, no obligation.