glacierr
glacierr
service · 04business continuity · disaster recovery · incident response
be ready before the disruption.
We help you prepare for disruption — connecting business continuity, disaster recovery and cyber incident response into one coherent capability, with clear responsibilities, plans your teams can follow, and exercises that show whether they work.
business continuity — keeping critical services running
disaster recovery — what comes back, in what order
incident response — who decides what, and when
01what changes for you
Critical services mapped with targets the business set, named owners and decision rights agreed in advance, and plans that are exercised — not assumed.
Critical services and dependencies mapped, with RTOs and RPOs set by the business.
Named owners, decision rights and escalation routes, agreed in advance.
Policies, plans, playbooks and procedures written for the people who use them.
BC, DR and IR plans that hand off cleanly instead of contradicting each other.
Tabletop exercises and walkthroughs that show what holds and what breaks.
ISO 22301, BCI Good Practice, FCA/PRA, DORA or NIS2 where they apply.
02what we typically find
A continuity plan, a DR document and an incident policy — written at different times, for different auditors. Nobody is sure who makes the call, and none of it has been tested with the people who would use it.
03our approach
Four stages, each with a gate you sign. Senior consultants only — the people who scope are the people who deliver.
agree what "good" looks like
find what really matters
write the plans
test them with your team
04what you get
We plan and exercise — your teams respond and recover.
05who it's for
Clear decision rights when it counts.
A basis for resilience spend.
Agreed recovery targets to plan to.
Exercised plans and the evidence.
Sources: DSIT, Cyber Security Breaches Survey 2025/26 (30 April 2026); FCA PS21/3 and PRA SS1/21, Operational resilience (March 2021); Regulation (EU) 2022/2554, DORA (applies from 17 January 2025).
Fixed scope, fixed fee — typically six to eight weeks. We've lived the 3am incidents; your plans should be ready for them.