Bankowość i finanse
|CS.103
Business Continuity Recovery Capability Assessment
IT readiness assessment for a retail chain's disaster recovery - workshops, procedure audit, and operational resilience improvement plan.
Client
Rapidly growing retail chain, one of the most recognized brands in its sector in Poland
Challenge
The client needed an objective assessment of its ability to restore critical IT architecture components to normal operation in the event of a failure or incident. The assessment was to cover applications, infrastructure, and the maturity of recovery procedures.
Approach
Assessment model based on ISO 22301 and ISO 27031
Application of proprietary questionnaires and checklists based on ISO 22301, ISO 27031, and NIST 800-34 standards.
Interactive workshops
Conducting workshops with IT and business teams to gather information about processes, procedures, and infrastructure.
Readiness assessment and recommendations
Analysis of application readiness, infrastructure resilience, and procedure maturity. Development of prioritized recommendations: redundant POS infrastructure, DRP update for the supply chain, regular RTO/RPO testing, and IT training.
Results
Application readiness: 72% - improvement needed for critical systems
Infrastructure resilience: 58% - insufficient redundancy in data centers
Procedure maturity: 45% - lack of regular testing and updates
Plan to increase operational resilience by 30%
Recommendations to reduce recovery time by over 50%
Related case studies
CS.106
Adversary Emulation Security Testing
APT attack emulation against a bank in critical infrastructure - 7 scenarios, SOC collaboration, and 2-day training workshops.
CS.102
AI Deployment Risk and Compliance Analysis in Banking
Comprehensive risk analysis of AI solution deployment (Microsoft 365 Copilot, Azure AI, AWS AI) at a systemically important bank.
CS.112
Cyber Risk Management in Strategic Investments
Supporting the general contractor of a U.S. military base construction in Europe in meeting CMMC 2.0 and RMF requirements for building automation systems.
We'll discuss scope, methodology, and timeline.
Free consultation, no strings attached.