Define failure: system unavailable, incomplete records, missed deadline, wrong customer information, or changed scope. Each condition needs a different response.
NIST recovery requires restoring service and communicating change. Identify the affected queue, last trusted state, immediate owner, stale information, next decision, and work that must pause.
CISA’s high-impact approach supports protecting the source record and recording initial impact. The World Bank’s Philippines research describes connectivity and digital capability as dependencies.
Set a threshold such as restored access, identified records, customer contact, or corrected handoff. After recovery, review whether boundary, access, handoff, or demand caused it.