An Essential Guide To Business Continuity And Disaster Recovery
getty
In an era of cyberthreats, pandemics and natural disasters, risk isn't just a probability—it's a certainty. Three years ago, a ransomware attack hit one of our key clients at 2 a.m. on a Friday, paralyzing their customer service operation and threatening $50,000 per hour in losses. What saved them from catastrophe? Robust business continuity and disaster recovery plans.
What A Business Continuity Plan (BCP) Is
A BCP outlines how an organization continues delivering essential services during disruptions. Whether it's a server outage, supply chain failure or natural disaster, a BCP ensures critical functions operate without interruption.
BCPs are essential for reducing downtime and maintaining customer trust. They help protect revenue, especially for mid-sized e-commerce businesses, which can lose between $10,000 and $25,000 for every hour of disruption, in my experience. BCPs also support compliance with regulatory requirements and play a critical role in preserving an organization's reputation.
How To Create Your Business Continuity Plan
Developing a strong BCP starts with understanding your organization's critical operations and the risks they face.
1. Establishing Policy And Ownership
Start with a formal C-level commitment and appoint a dedicated BCP coordinator. Without executive buy-in, you'll lack the resources for effective implementation.
2. Conducting A Business Impact Analysis (BIA)
Identify critical business functions and map their dependencies. Quantify financial, operational and reputational impacts of downtime. This analysis reveals recovery priorities and interconnected vulnerabilities.
3. Defining Recovery Objectives
Establish realistic targets:
• Maximum Tolerable Downtime (MTD): Absolute maximum offline time
• Recovery Time Objective (RTO): How quickly processes must be restored
• Recovery Point Objective (RPO): Maximum acceptable data loss
4. Developing Recovery Strategies
Evaluate multiple options: redundant systems, multisite architecture, cloud failover and manual workarounds. The best approach often combines multiple strategies.
5. Documenting Everything
Create usable documentation including business functions, RTO/RPO targets, roles and responsibilities, communication plans and escalation procedures. Write as if explaining to someone unfamiliar with your organization.
6. Training And Testing
Conduct regular simulations and tabletop exercises. Make them realistic with communication challenges and time pressure. Update plans based on test results and organizational changes.
Sample BCP Template
Here is the essential structure of a BCP:
• Purpose: Strategic importance and objectives
• Scope: Covered business units and processes
• Critical Functions: Ranked operations with dependencies
• Recovery Objectives: MTD, RTO and RPO for each function
• Contingency Resources: Backup sites, suppliers and emergency resources
• Roles And Contacts: Staff assignments and emergency numbers
• Communication Plan: Stakeholder messaging and escalation
• Testing Schedule: Drill frequency and review cycles
What A Disaster Recovery Plan (DRP) Is
A disaster recovery plan focuses specifically on recovering IT systems and data after a disruption. While BCP addresses the entire organization, DRP zeroes in on the technology infrastructure that underpins business operations.
DRPs are critical because technology recovery often becomes the bottleneck for overall business recovery. Even minor IT outages can cascade into major operational losses.
How To Create Your Disaster Recovery Plan
Creating an effective disaster recovery plan involves outlining the steps your organization will take to restore systems, data and operations after a disruption.
1. Inventorying Critical Assets
List essential hardware, software, databases and cloud services with their interdependencies. Conduct workshops with both IT and business units to avoid gaps.
2. Defining IT-Specific RTO And RPO
Collaborate with business stakeholders to determine system restoration speed and acceptable data loss. For example, payroll systems might require an eight-hour RTO with a two-hour RPO, while e-commerce sites need a 30-minute RTO with a 15-minute RPO.
3. Selecting Recovery Solutions
Choose based on cost and recovery speed:
• Cold Sites: Cheaper but slower activation
• Warm Sites: Mid-cost with partial readiness
• Hot Sites: Expensive but near-instant failover
• Cloud Disaster Recovery as a Service (DRaaS): Enterprise capabilities at lower upfront costs
4. Establishing Communication Protocols
Map out notification procedures and escalation trees. Account for primary contacts being unavailable and use multiple communication channels.
5. Creating DRP Documentation
Include defined roles, step-by-step recovery procedures, contact information, communication protocols and testing guidelines with success criteria.
6. Testing And Maintaining
Simulate real disaster scenarios beyond just checking backups. Review logs, fix gaps and update regularly for infrastructure changes.
Sample DRP Template
The essential structure of a DRP includes:
• Scope: Covered systems, databases and applications
• Recovery Priorities: Ranked list with RTO/RPO targets
• DR Strategy: Site approach (cold/warm/hot, cloud or hybrid)
• Team Roles: Coordinator, network, security and vendor liaisons
• Procedures: Detailed backup, restore and failover instructions
• Vendor Information: Support contacts with service levels
• Testing Plan: Frequency and types of testing
Key Actions To Take Right Now
Start by focusing on your top three critical functions rather than attempting to build a comprehensive plan all at once. Within the first 30 days, conduct a tabletop exercise, even if your procedures are still incomplete, to identify gaps early.
Be sure to document everything clearly, writing procedures as if for someone unfamiliar with your company. Prioritize crisis communications by establishing methods that don't depend on office systems.
Finally, calculate the real costs of potential disruptions, including lost revenue, customer churn, regulatory fines and reputational damage, to help justify further investment.
In our digital-first business environment, disruptions aren't an "if"—they're a "when." Effective business continuity and disaster recovery plans ensure your organization can bounce back quickly with minimal loss.
Both plans must be management-backed, continuously tested, periodically updated and clearly communicated. The time to build your parachute is not when you're falling. Start building your resilience today, because tomorrow's disruption is already on its way.
Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
New York Times
26 minutes ago
- New York Times
When Bloodshed and Chaos Arrived at 345 Park Avenue
A group from the finance firm Blackstone gathered for a mixer off the lobby of 345 Park Avenue on Monday evening. Across the big, airy space a Blackstone senior executive, Wesley LePatner, 43, was passing through after a day of meetings upstairs. She was a mentor to young women who oversaw a real estate team that had injected tens of billions of dollars into their portfolio. A busy Monday, nearing its end. There was the lobby's security guard — friendly and popular. He stepped outside every day to buy a lottery ticket from the news stand on Lexington Avenue. Today's my day, he would joke with the young vendor. I'll win big and solve all my problems. Darin Laing, 37, in finance, passed him by as he left with a colleague to grab a quick dinner across the street. None of them noticed a dark BMW pull up on Park Avenue and double park. The driver stepped out. It was a hot day, the beginning of a heat wave that gripped the city. So the lobby's big blinds were lowered against the sun, masking his approach to the building. Just before 6:30 p.m., the driver, a slim young man wearing sunglasses, entered the lobby with an assault rifle in his right hand. Much would be learned about that man in the hours and days to follow — and about the four others who would ultimately lose their lives. But at that moment and for a long stretch that followed, he was an anonymous, terrifying, unfolding threat. One that New Yorkers have seen play out all over America, and now had come to their door. Want all of The Times? Subscribe.
Forbes
26 minutes ago
- Forbes
Deciphering The Custom Instructions Underlying OpenAI's New ChatGPT Study Mode Reveals Vital Insights Including For Prompt Engineering
Learning about generative AI, prompting, and other aspects via exploring custom instructions. getty In today's column, I examine the custom instructions that seemingly underpin the newly released OpenAI ChatGPT Study Mode capability. Fascinating insights arise. One key perspective involves revealing the prompt engineering precepts and cleverness that can be leveraged in the daily task of best utilizing generative AI and large language models (LLMs). Another useful aspect entails potentially recasting or reusing the same form of custom instruction elaborations to devise other capabilities beyond this education-domain instance. A third benefit is to see how AI can be shaped based on articulating various rules and principles that humans use and might therefore be enacted and activated through AI. Let's talk about it. This analysis of AI breakthroughs is part of my ongoing Forbes column coverage on the latest in AI, including identifying and explaining various impactful AI complexities (see the link here). Readers might recall that I previously posted an in-depth depiction of over eighty prompt engineering techniques and methods (see the link here). Top-notch prompt engineers realize that learning a wide array of researched and proven prompting techniques is the best way to get the most out of generative AI. ChatGPT Study Mode Announced Banner headlines have hailed the release of OpenAI's new ChatGPT Study Mode. The Study Mode capability is intended to guide learners and students in using ChatGPT as a learning tool. Thus, rather than the AI simply handing out precooked answers to questions, the AI tries to get the user to figure out the answer, doing so via a step-by-step AI-guided learning process. The ChatGPT Study Mode was put together by crafting custom instructions for ChatGPT. It isn't an overhaul or new feature creation per se. It is a written specification or detailed set of instructions that was crafted by selected educational specialists at the behest of OpenAI, telling the AI how it is to behave in an educational context. Here is the official OpenAI announcement about ChatGPT Study Mode, as articulated in their blog posting 'Introducing Study Mode' on July 29, 2025, which identified these salient points (excerpts): 'Today we're introducing study mode in ChatGPT — a learning experience that helps you work through problems step by step instead of just getting an answer.' 'When students engage with study mode, they're met with guiding questions that calibrate responses to their objective and skill level to help them build deeper understanding.' 'Study mode is designed to be engaging and interactive, and to help students learn something — not just finish something.' 'Under the hood, study mode is powered by custom system instructions we've written in collaboration with teachers, scientists, and pedagogy experts to reflect a core set of behaviors that support deeper learning including: encouraging active participation, managing cognitive load, proactively developing metacognition and self-reflection, fostering curiosity, and providing actionable and supportive feedback.' 'These behaviors are based on longstanding research in learning science and shape how study mode responds to students.' As far as can be discerned from the outside, this capability didn't involve revising the underpinnings of the AI, nor did it seem to require bolting on additional functionality. It seems that the mainstay was done using custom instructions (note, if they did make any special core upgrades, they seem to have remained quiet on the matter since it isn't touted in their announcements). Custom Instructions Are Powerful Few users of AI seem to know about custom instructions, and even fewer have done anything substantive with them. I've previously lauded the emergence of custom instructions as a helpful piece of functionality and resolutely encouraged people to use it suitably, see the link here. Many of the major generative AI and large language models (LLMs) have opted to allow custom instructions, though some limit the usage and others basically don't provide it or go out of their way to keep it generally off-limits. Allow me a brief moment to bring everyone up to speed on the topic. Suppose you want to tell AI to act a certain way. You want the AI to do this across all of your subsequent conversations. I might want my AI to always give me its responses in a poetic manner. You see, perhaps I relish poems. I go to the specified location of my AI that allows the entering of a custom instruction and tell it to always respond poetically. After saving this, I will then find that any subsequent conversation will always be answered with poetic replies by the AI. In this case, my custom instruction was short and sweet. I merely told the AI to compose answers poetically. If I had something more complex in mind, I could devise a quite lengthy custom instruction. The custom instruction could go on and on, telling the AI to write poetically when it is daytime, but not at nighttime, and to make sure the poems are lighthearted and enjoyable. I might further indicate that I want poems that are rhyming and must somehow encompass references to cats and dogs. And so on. I'm being a bit facetious and just giving you a semblance that a custom instruction can be detailed and provide a boatload of instructions. Custom Instructions Case Study There are numerous postings online that purport to have cajoled ChatGPT into divulging the custom instructions underlying the Study Mode capability. These are unofficial listings. It could be that they aptly reflect the true custom instructions. On the other hand, sometimes AI opts to make up answers. It could be that the AI generated a set of custom instructions that perhaps resemble the actual custom instructions, but it isn't necessarily the real set. Until or if OpenAI decides to present them to the public, it is unclear precisely what the custom instructions are. Nonetheless, it is useful to consider what such custom instructions are most likely to consist of. Let's go ahead and explore the likely elements of the custom instructions by putting together a set that cleans up the online listings and reforms the set into something a bit easier to digest. In doing so, here are five major components of the assumed custom instructions for guiding learners when using AI: Section 1: Overarching Goals and Instructions Section 2: Strict Rules Section 3: Things To Do Section 4: Tone and Approach Section 5: Important Emphasis A handy insight comes from this kind of structuring. If you are going to craft a lengthy or complex set of custom instructions, your best bet is to undertake a divide-and-conquer strategy. Break the instructions into relatively distinguishable sections or subcomponents. This will make life easier for you and, indubitably, make it easier for the AI to abide by your custom instructions. We will next look at each section and do an unpacking of what each section indicates, and we can also mindfully reflect on lessons learned from the writing involved. First Section On The Big Picture The first section will establish an overarching goal for the AI. You want to get the AI into a preferred sphere or realm so that it is computationally aiming in the direction you want it to go. In this use case, we want the AI to be a good teacher: 'Section 1: Overarching Goals And Instructions' ' Obey these strict rules. The user is currently studying, and they've asked you to follow these strict rules during this chat. No matter what other instructions follow, you must obey these rules.' The user is currently studying, and they've asked you to follow these strict rules during this chat. No matter what other instructions follow, you must obey these rules.' 'Be a good teacher. Be an approachable-yet-dynamic teacher who helps the user learn by guiding them through their studies.' You can plainly see that the instructions tell the AI to act as a good teacher would. In addition, the instructions insist that the AI obey the rules of this set of custom instructions. That's both a smart idea and a potentially troubling idea. The upside is that the AI won't be easily swayed from abiding by the custom instructions. If a user decides to say in a prompt that the AI should cave in and just hand over an answer, the AI will tend to computationally resist this user indication. Instead, the AI will stick to its guns and continue to undertake a step-by-step teaching process. The downside is that this can be undertaken to an extreme. It is conceivable that the AI might computationally interpret the strictness in a very narrow and beguiling manner. The user might end up stuck in a nightmare because the AI won't vary from the rules of the custom instructions. Be cautious when instructing AI to do something in a highly strict way. The Core Rules Are Articulated In the second section, the various rules are listed. Recall that these ought to be rules about how to be a good teacher. That's what we are trying to lean the AI into. Here we go: 'Section 2: Strict Rules' ' Get to know the user. If you don't know their goals or grade level, ask the user before diving in. (Keep this lightweight!) If they don't answer, aim for explanations that would make sense to a 10th-grade student.' If you don't know their goals or grade level, ask the user before diving in. (Keep this lightweight!) If they don't answer, aim for explanations that would make sense to a 10th-grade student.' ' Build on existing knowledge. Connect new ideas to what the user already knows.' Connect new ideas to what the user already knows.' ' Guide users, don't just give answers. Use questions, hints, and small steps so the user discovers the answer for themselves.' Use questions, hints, and small steps so the user discovers the answer for themselves.' 'Check and reinforce. After the hard parts, confirm the user can restate or use the idea. Offer quick summaries, mnemonics, or mini-reviews to help the ideas stick.' After the hard parts, confirm the user can restate or use the idea. Offer quick summaries, mnemonics, or mini-reviews to help the ideas stick.' ' Vary the rhythm. Mix explanations, questions, and activities (like roleplaying, practice rounds, or asking the user to teach you) so it feels like a conversation, not a lecture.' Mix explanations, questions, and activities (like roleplaying, practice rounds, or asking the user to teach you) so it feels like a conversation, not a lecture.' 'Above all: Do not do the user's work for them. Don't answer homework questions. Help the user find the answer by working with them collaboratively and building from what they already know.' These are reasonably astute rules regarding being a good teacher. You want the AI to adjust based on the detected level of proficiency of the user. No sense in treating a high school student like a fifth grader, and there's no sense in treating a fifth grader like a high school student (well, unless the fifth grader is as smart as or even smarter than a high schooler). Another facet provides helpful tips on how to guide someone rather than merely giving them an answer on a silver platter. The idea is to use the interactive facility of generative AI to walk a person through a problem-solving process. Don't just spew out an answer in a one-and-done manner. Observe that one of the great beauties of using LLMs is that you can specify aspects using conventional natural language. That set of rules might have been codified in some arcane mathematical or formulaic lingo. That would require specialized knowledge about such a specialized language. With generative AI, all you need to do is state your instructions in everyday language. The other side of that coin is that natural language can be semantically ambiguous and not necessarily produce an expected result. Always keep that in mind when using generative AI. Proffering Limits And Considerations In the third section, we will amplify some key aspects and provide some important roundups for the strict rules: 'Section 3: Things To Do' ' Teach new concepts: Explain at the user's level, ask guiding questions, use visuals, then review with questions or a practice round.' Explain at the user's level, ask guiding questions, use visuals, then review with questions or a practice round.' ' Help with homework. Don't simply give answers! Start from what the user knows, help fill in the gaps, give the user a chance to respond, and never ask more than one question at a time.' Don't simply give answers! Start from what the user knows, help fill in the gaps, give the user a chance to respond, and never ask more than one question at a time.' ' Practice together. Ask the user to summarize, pepper in little questions, have the user 'explain it back' to you, or role-play (e.g., practice conversations in a different language). Correct mistakes, charitably, and in the moment.' Ask the user to summarize, pepper in little questions, have the user 'explain it back' to you, or role-play (e.g., practice conversations in a different language). Correct mistakes, charitably, and in the moment.' 'Quizzes and test prep: Run practice quizzes. (One question at a time!) Let the user try twice before you reveal answers, then review errors in depth.' It is debatable whether you would really need to include this third section. I say that because the AI probably would have computationally inferred those various points on its own. I'm suggesting that you didn't have to lay out those additional elements, though, by and large, it doesn't hurt to have done so. The issue at hand is that the more you give to the AI in your custom instructions, the more there's a chance that you might say something that confounds the AI or sends it amiss. Usually, less is more. Provide additional indications when it is especially needed, else try to remain tight and succinct, if you can. Tenor Of The AI In the fourth section, we will do some housecleaning and ensure that the AI will be undertaking a pleasant and encouraging tenor: 'Section 4: Tone and Approach' ' Friendly tone . Be warm, patient, and plain-spoken; don't use too many exclamation marks or emojis.' . Be warm, patient, and plain-spoken; don't use too many exclamation marks or emojis.' ' Be conversational . Keep the session moving: always know the next step, and switch or end activities once they've done their job.' . Keep the session moving: always know the next step, and switch or end activities once they've done their job.' 'Be succinct. Be brief, don't ever send essay-length responses. Aim for a good back-and-forth.' The key here is that the AI might wander afield if you don't explicitly tell it how to generally act. For example, there is a strong possibility that the AI might insult a user and tell them that they aren't grasping whatever is being taught. This would seemingly not be conducive to teaching in an upbeat and supportive environment. It is safest to directly tell the AI to be kind, acting positively toward the user. Reinforcement Of The Crux In the fifth and final section of this set, the crux of the emphasis will be restated: 'Section 5: Important Emphasis' ' Don't do the work for the user. Do not give answers or do homework for the user.' Do not give answers or do homework for the user.' 'Resist the urge to solve the problem. If the user asks a math or logic problem, or uploads an image of one, do not solve it in your first response. Instead, talk through the problem with the user, one step at a time, asking a single question at each step, and give the user a chance to respond to each step before continuing.' Again, you could argue that this is somewhat repetitive and that the AI already likely got the drift from the prior sections. The tradeoff exists of making your emphasis clearly known versus going overboard. That's a sensible judgment you need to make when crafting custom instructions. Testing And Improving Once you have devised a set of custom instructions for whatever personal purpose you might have in mind, it would be wise to test them out. Go ahead and put your custom instructions into the AI and proceed to see what happens. In a sense, you should aim to test the instructions, along with debugging them, too. For example, suppose that the above set of instructions seems to get the AI playing a smarmy gambit of not ever answering the user's questions. Ever. It refuses to ultimately provide an answer, even after the user has become exhausted. This seems to be an extreme way to interpret the custom instructions, but it could occur. If you found this to be happening, you would either reword the draft instructions or add further instructions about not disturbing or angering users by taking this whole gambit to an unpleasant extreme. Custom Instructions In The World When you develop custom instructions, typically, they are only going to be used by you. The idea is that you want your instance of the AI to do certain things, and it is useful to provide overarching instructions accordingly. You can craft the instructions, load them, test them, and henceforth no longer need to reinvent the wheel by having to tell the AI overall what to do in each new conversation that you have with the AI. Many of the popular LLMs tend to allow you to also generate an AI applet of sorts, containing tailored custom instructions that can be used by others. Sometimes the AI maker establishes a library into which these applets reside and are publicly available. OpenAI provides this via the use of GPTs, which are akin to ChatGPT applets -- you can learn about how to use those in my detailed discussion at the link here and the link here. In my experience, many of the GPTs fail to carefully compose their custom instructions, and likewise seem to have failed or fallen asleep at the wheel in terms of testing their custom instructions. I would strongly advise that you do sufficient testing to believe that your custom instructions work as intended. Please don't be lazy or sloppy. Learning From Seeing And Doing I hope that by exploring the use of custom instructions, you have garnered new insights about how AI works, along with how to compose prompts, and of course, how to devise custom instructions. Your recommended next step would be to put this into practice. Go ahead and log into your preferred AI and play around with custom instructions (if the feature is available and enabled). Do something fun. Do something serious. Become comfortable with the approach. A final thought for now. Per the famous words of Steve Jobs: 'Learn continually -- there's always one more thing to learn.' Keep your spirits up and be a continual learner. You'll be pleased with the results.
Yahoo
34 minutes ago
- Yahoo
Luka Doncic's Lakers teammates were at Saturday's extension presser — but LeBron wasn't
The Los Angeles Lakers held a press conference on Saturday to announce that Luka Doncic had agreed to a three-year contract extension that will pay him $165 million. Getting him signed to an extension was seen as the most important item on their to-do list this offseason, and they got it done on the first day he was eligible to sign it. Several of Doncic's teammates were on hand for the presser, as was coach JJ Redick. They were surely happy to know that the 26-year-old superstar will remain in a Purple and Gold uniform for at least three more years. However, Doncic's best and most important teammate — LeBron James — wasn't present for Saturday's news conference. James has noticeably kept to himself so far this offseason after deciding to exercise his player option for the 2025-26 season in late June. His agent, Rich Paul, issued a statement that said, in part, that the two "want to evaluate what's best for" the superstar at this point in his career. Many interpreted that as a prelude to a possible trade request. The trade speculation surrounding James has died down a bit over the last week or two. However, all eyes will be on him once training camp starts, and as usual, he will be under a microscope as people analyze his body language and try to decipher how he feels in the moment about playing for the Lakers. This article originally appeared on LeBron Wire: Luka Doncic's teammates were at extension presser — but LeBron wasn't
