The business impact analysis and risk assessment processes will have resulted in a number of recommended strategies and associated solutions for business/IT continuity and risk mitigation, for instance :

• Internal arrangements, such as ‘spare’ office accommodation, mirroring/replication of IT systems/data or reciprocal arrangements with other parts of the group;
• Specialist external services, such as workarea or IT recovery sites, emergency transport, crisis communications or salvage and restoration services;
• Environmental improvements, such as fire, water or intruder detection, physical security or diverse routing of power or telecomm’s circuits;
• Policy, process or procedural changes, to improve resilience or reduce single points of failure.