British Library: recovery can outlast initial disruption

The British Library's disruption lasted far longer than the attack, because so much had to be rebuilt rather than restored.

Systems that were old, interdependent and in some cases no longer supported could not simply be brought back. It is the case to point at when recovery time objectives are being set optimistically: the constraint is often not the backups but whether the thing you are restoring onto still exists.

More on Real incident lessons