Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Why Clean Recovery Planning Happens Before the Crisis

Veeam
03/20/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


But I think we wanted to start with the preparation. Because Ray, I think in your experience working with customers, so much of what makes recovery successful in these crisis situations comes down to the preparation. Why don't you break down why clean recovery is all part of that muscle memory? I think a huge component of it is we have to remember, it's people, process, and technology. Because a lot of times when we're thinking about recovery, we're hyper-focused on the technology components of backup and restoration capabilities and so forth. That's critical, that's huge, and having the right solution in that place is going to be pass or fail, that's going to be an important keystone. But the people and process side of the house is where a lot of organizations struggle because they haven't gone through is our plan reflective of what we would actually do in the course of an event? Is everyone aware of the plan that we actually have in place? How do we escalate, how do we communicate, and how do we operate? You want to assemble that before an event. That's the last time, you don't want to assemble it during, you want to execute during the event itself. Being able to work through those motions, those mechanics in peacetime, identify those gaps and opportunities, that's a critical piece of it because the reality is, you will always have to account for different event-specific nuances and pivots. But having that foundational muscle memory established, so you at least have a north star to work towards, really does determine the difference between a optimal outcome and a less than optimal one. I think that muscle memory piece is key too, because it implies repetition, practice, dealing with the failures that come from that. For anyone who's played sports, for anyone who has done anything creative or team-based, I think a lot of that repetition and dealing with the failure is key to that end. I really would love to hear from you guys in the audience, and we are streaming from many different platforms, but we've got a production team that's watching, all the different comment boxes. So please let us know any questions you have, if you want to fight me on The Last Jedi, please. I love picking a fight. But in particular, I do want to hear from you guys, which part of your recovery playbook could use more reps? That repetition is key. So should it be running full tabletop exercises, practicing escalation paths, verifying last known good copies? We're going to talk about that a little bit later. Aligning with security and legal. Those are sometimes black box organizations that we don't spend enough time with. Or honestly, is it all of the above? Which I have a feeling it's all the above. Ray, I'm looking at your face, and I think from your customer experience, it's probably all the above. I would personally choose E, but I think another thing too, beyond the polling question, I would love to hear from, how often should some of these things happen? Because a lot of times we get into this annual kind of cadence in a trap, but is that enough for organizations? And I would argue it may not be, so. And I think it's hard to really, we were having a debrief yesterday with one of our directors of systems engineering who executed a disaster, I'm sorry, a data resilience maturity workshop, which we'll talk about a bit later. And a funny story of that is that they couldn't get all the folks in the room because they were actually running a TTX tabletop exercise in another conference room. So I share that anecdote to say it's kind of funny because I do think that there's this idea of trying to get the right people in the room, the right people who maybe have the altitude perspective, but then also a breadth of experience. It's really tough to get everyone on the same page. So later in the show, we're going to talk about some talking points that you might be able to bring to your organization to make this more of a time priority. Because Ray, in your experience, when you've looked at organizations that are ready for the worst to happen, how often would you say that they run these kinds of exercises? Well, I think in general, we have to kind of break this up a little bit. I think there's typically a once a year tabletop that's holistic across the organization because you're hurting a lot of cats at that time. And time is probably the most critical resource when you think about putting these things together. As you mentioned, a lot of things are happening in parallel and timing of how the business is operating. But I think what I find with more impact is often those kind of micro events, right? Taking every opportunity, an incident, an outage, whatever it is, as another opportunity to run through the needful, to run through the paths of escalation, to do the things that are in the plan and identify opportunities for improvement. So I think it's a combination of don't let a good incident go to waste, doing the annual full-scale exercises, but also in between that, finding times for just the smaller team to maybe look at their portion or these two teams to talk together. And it's a lot easier sometimes to get an hour with two teams about two specific components of a playbook than it is to get three or four hours with the entire executive team trying to work through all the mechanics.

TL;DR

  • Recovery success depends on people, process, and technology working together, with many organizations over-focusing on backup technology while neglecting the human and procedural elements that determine real-world outcomes.
  • Building muscle memory through regular practice is essential, requiring annual comprehensive tabletop exercises supplemented by smaller team drills and treating every operational incident as a learning opportunity.
  • Effective preparation means assembling escalation paths, communication protocols, and cross-functional alignment before an event occurs, not during the crisis when execution should be the only focus.

Summary

This tactical discussion between host Leah Troscianecki and Field CISO Raymond Umerley examines why effective disaster recovery depends on preparation rather than crisis response. The conversation emphasizes that while backup technology is critical, the people and process components often determine success or failure during actual incidents. Umerley draws on customer experience to explain how organizations struggle when recovery plans don't reflect real-world execution, lack clear escalation paths, or haven't been tested through repetition. The discussion advocates for building muscle memory through regular practice, including annual comprehensive tabletop exercises supplemented by smaller team-focused drills and learning from every operational incident. The core message positions recovery readiness as a strategic capability that builds executive trust and transforms IT operations from reactive firefighters into architects of organizational resilience.

Chapters

0:00 - Introduction to Clean Recovery Planning
0:25 - People, Process, and Technology Balance
1:30 - Building Muscle Memory Through Repetition
4:05 - Exercise Frequency and Micro-Events

Key Quotes

0:27 "I think a huge component of it is we have to remember, it's people, process, and technology. Because a lot of times when we're thinking about recovery, we're hyper-focused on the technology components of backup and restoration capabilities and so forth."
1:02 "You want to assemble that before an event. That's the last time, you don't want to assemble it during, you want to execute during the event itself."
4:43 "Don't let a good incident go to waste, doing the annual full-scale exercises, but also in between that, finding times for just the smaller team to maybe look at their portion or these two teams to talk together."

Categories:
  • » Data Protection » Backup & Recovery
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Data Protection
  • Best Practices
  • Technical Deep Dive
  • Security Operations
  • disaster recovery planning
  • clean recovery
  • incident response
  • tabletop exercises
  • business continuity
  • ransomware preparedness
  • IT operations resilience
  • cross-functional alignment
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Why Clean Recovery Planning Happens Before the Crisis

              Industry Events (Sponsor Hosted)

              • Aug
                06

                Safeguarding Sensitive Data in the Age of AI Platforms

                08/06/202604:00 AM ET
                • Aug
                  06

                  AI Agents Revolutionizing Identity Attacks: Same Tactics, Enhanced Speed

                  08/06/202602:00 PM ET
                  • Aug
                    13

                    Harnessing AI for Secure Innovation in the Enterprise with Netskope & Omada

                    08/13/202612:00 PM ET
                    More events

                    Upcoming Webinar Calendar

                    • 08/06/2026
                      04:00 AM
                      08/06/2026
                      Safeguarding Sensitive Data in the Age of AI Platforms
                      https://www.truthinit.com/index.php/channel/2058/safeguarding-sensitive-data-in-the-age-of-ai-platforms/
                    • 08/06/2026
                      02:00 PM
                      08/06/2026
                      AI Agents Revolutionizing Identity Attacks: Same Tactics, Enhanced Speed
                      https://www.truthinit.com/index.php/channel/2064/ai-agents-revolutionizing-identity-attacks-same-tactics-enhanced-speed/
                    • 08/13/2026
                      12:00 PM
                      08/13/2026
                      Harnessing AI for Secure Innovation in the Enterprise with Netskope & Omada
                      https://www.truthinit.com/index.php/channel/2065/harnessing-ai-for-secure-innovation-in-the-enterprise-with-netskope-omada/
                    • 08/19/2026
                      12:00 PM
                      08/19/2026
                      Becoming Agent Ready with Cyera: Essential Strategies and Insights
                      https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-with-cyera-essential-strategies-and-insights/
                    • 09/02/2026
                      12:00 PM
                      09/02/2026
                      Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                      https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                    • 09/30/2026
                      04:00 AM
                      09/30/2026
                      AI Command Center: Optimizing Visibility and Control in Your Operations
                      https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                    Truth in IT
                    • Sponsor
                    • About Us
                    • Terms of Service
                    • Privacy Policy
                    • Contact Us
                    • Preference Management
                    Desktop version
                    Standard version