# Clause 8.4.5: Recovery

Keep documented processes for bringing business activities back to normal, moving them off the stopgap measures put in place while a disruption lasted and after it.

Cloud: Recovery is not only restoring service; it is restoring data, access and trust in the right order. State what must be true before the service is called recovered, and who confirms it.

Evidence: Documented restoration and return to normal processes; Criteria for deciding that temporary measures can be withdrawn; Evidence of use, from exercises or real events, including backlog clearance.

Test: Write the exit criteria for recovery and the role that signs them.

Citation: ISO 22301:2019, clause 8.4.5. Source: https://compliance.theartofservice.com/frameworks/iso-22301-2019. Last updated: 2026-10-20.