A fixed-price gap analysis, remediation through to your audit, and upkeep after it. All in a workspace you keep.
All compliance →Led by a published security researcher with five CVEs. One standard report, letters for your buyers, and retests of your fixes.
All security →To the people you sell to, raise from or answer to.
All industries →Original research, free tools, and plain-language guides on security and compliance, from a published security researcher.
Read the blog →List the systems your business runs on. You get what an hour down costs for each, whether a restore would land inside the time you can live with, and which one to fix first.
Rough numbers are fine. They only set the scale.
Start with the ones your customers or your team would notice within an hour. Edit, remove or add.
The recovery time objective (RTO) is how long a system can be down before the damage is unacceptable. The recovery point objective (RPO) is how much data you can afford to lose, measured as time since the last good copy. A system with a four-hour RTO and a one-hour RPO has to be back within four hours, missing no more than the last hour of data.
Two parts: the revenue that stops while the system is down, and the paid staff time that stops with it. Both are scaled by how much of the work depends on that system. It leaves out penalties, lost customers and recovery costs, so treat it as the floor, not the ceiling.
Because an untested backup is a hope, not a recovery time. Restores fail for ordinary reasons: missing keys, a dependency nobody wrote down, a copy that was quietly failing. An untested restore is treated as a gap whatever its estimated time.
SOC 2 (availability), ISO 27001 (A.5.30 ICT readiness and A.8.13 backup) and PCI DSS all expect backups and recovery to be tested, and auditors ask for the record. A dated recovery exercise with real restore times is usually that evidence.
Yes, free and no signup. Everything you enter stays in your browser.
We plan and run a recovery exercise on your critical systems, time the real restore, and give you a written record of what met its target and what did not. From $4,000 CAD.
See continuity testing Talk about recoveryNot ready for a call yet?
Your downtime costs and recovery gaps to keep, then a few short notes from Jacob on testing recovery before an outage tests it for you. Unsubscribe in one click. Reply anytime; it reaches him directly.
From Jacob Masse, principal of traztech: the files by email, then a few short notes over the next month. No spam, unsubscribe in one click.
Want it done for you?
Business continuity and DR testing
A planned recovery exercise on your critical systems, with the real restore times on record.
Explore Business continuity and DR testing →This gives you the shape of the problem. traztech Workspace walks you through every control of whichever frameworks apply to you, in plain English, with an evidence register, policy templates, a risk register, vendor questionnaires, and an audit-readiness score. Start a free assessment and walk every control.
No credit card, no trial clock, no locked features. TrazTech makes money when someone wants help closing the gaps, not from the Workspace itself.