I just want to know if, in best practices, and according to ISO 22301, it is preferable, in case of need for recovery, to perform it fully automatically or require human intervention step by step.
Is there a clause in the ISO 22301 documentation that specifies or describes this fact.
Assign topic to the user
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more 
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
ISO 22301 does not prescribe how recovery needs to be performed, so organizations can implement recovery as best fits their needs.
The preference for fully automated recovery versus human intervention step by step would depend on various factors such as the criticality of the systems or data being recovered, the complexity of the recovery process, and the resources available.
Fully automated recovery processes can be faster and more efficient in certain situations, especially for routine or well-defined recovery scenarios where human intervention may introduce delays or errors. Automation can also help ensure consistency and reduce the risk of human error during the recovery process.
However, in some cases, human intervention may be necessary to make critical decisions, assess the situation, or address unforeseen issues that automated systems may not be able to handle. Human intervention can also provide a level of oversight and control that may be necessary for certain recovery scenarios.
Comment as guest or Sign in
Apr 18, 2024