Resilience
Backup & Recovery
Be able to restore OT operations from validated, protected backups.
Defensive guide
Why should I care?
Recovery capability determines whether an incident lasts hours or weeks.
How to implement it
- Back up controller logic, HMI projects, EWS images, recipes, network configs, safety logic, firmware, licences and certificates
- Keep offline or immutable copies unreachable from production credentials
- Test restoration on representative systems on a schedule
What good looks like
- Restoration tested, not just backup success reported
- Controller logic included, not just servers
Common failure modes
- Backups reachable from the systems they protect
- No licence or firmware copies
- Never restore-tested
How to verify it
- Perform a restore test in a lab and record the time taken