Business continuity and disaster recovery
Fire, flood, ransomware or a failed disk: the question is not whether it will happen, but how many hours or days the company will stand still and how much data it will lose. Business continuity means those two numbers are agreed in advance, written into a plan and tested regularly. In 2025 we obtained the ISO 22301 certificate for business continuity management as one of the few companies in Slovenia. We apply the same approach to our clients: from backups and a cold standby site to a plan that someone who is not an IT specialist can carry out.
Building blocks of business continuity
How we get to a working plan
- 01
Impact analysis
With management we define the critical processes and the acceptable outage and data-loss time for each.
- 02
Solution design
For each class of systems we choose the right measure: from a daily copy to hot replication; no overkill where it is not needed.
- 03
Implementation and plan
We set up the copies and the standby site and write the plan in language management understands too; a copy exists on paper.
- 04
Testing and upkeep
A yearly recovery drill with timing, an update of the plan at every system change and a report for management or the auditor.
Frequently asked questions
We have backups. Is that not enough?
A copy is the start, not the solution. The questions are: has it ever been restored, how long would a restore take, where would you restore to if the server is destroyed, and can ransomware delete it. Business continuity answers all four.
What do RTO and RPO mean?
RTO is the time within which a system must be running again; RPO is the maximum amount of data you may lose, expressed in time (e.g. the last 15 minutes). We set both with management for each system, because they determine the cost of the solution.
What is a cold standby site and do we need one?
A room or cloud capacity where equipment waits switched off and is started and filled from backups after a disaster. It is the cheapest form of standby site, suitable for systems that can stand still for a few hours. Systems that must not stop need hot replication.
Can you help us obtain our own ISO 22301 certificate?
Yes. We went through the certification ourselves in 2025, so we know which documents, measurements and drills the auditor expects. We prepare the management system, run the drills and accompany you at the audit.
How often do you test recovery?
Restores of individual files are checked automatically every month; a full drill with the standby site at least once a year and after every major system change. You receive the result with measured times in a report.
How much does business continuity cost?
It depends on the required times: daily backups with a cold site in the cloud are a monthly cost comparable to maintenance; hot replication for zero-downtime systems is several times more. That is why the impact analysis first determines which systems really need the expensive solution.