Review your disaster recovery plan like an auditor
You have a DR plan, but it hasn't been tested or read critically in a while.
- You get
- Findings by severity with a fix for each, and three questions to ask your team this week.
- Works in
- ChatGPT
- Claude
- Copilot
- Gemini
Fill in the blanks
A few words each is enough. Leave a blank empty and the assistant will ask you or assume.
Describe, don't paste: no CUI, personal data, hostnames, IP addresses or credentials. What you type stays on this page until you copy it or open it in an assistant.
Your prompt0 of 1 filled
Act as an experienced disaster recovery auditor. Review the plan below and find what would fail in a real ransomware recovery, not just a hardware outage. Check specifically for: recovery order and dependencies (identity before applications), how we'd recover if Active Directory or Entra ID is compromised, whether the same attacker could encrypt or delete the backups, a clean place to recover to, out-of-band communication, named owners with deputies, and when the plan was last tested. List the findings by severity, with a one-line fix for each. Then list the three questions I should ask our team this week. Our plan: [Paste your plan, with names, IP addresses and hostnames removed] Some details above are still in square brackets. Ask me for them before you answer, rather than guessing.
Before you paste
Plans often hold sensitive detail. Strip it out first, or use an AI tool your organization has approved for internal documents.
Then check the answer
Identity recovery guide
Plan Active Directory and Entra ID recovery first
More planning prompts
All 28 prompts- Check your backups against the 3-2-1-1-0 ruleYou want to know whether your backup copies would survive ransomware that goes after backups first.
- Set RTO and RPO tiers for your systemsLeadership wants recovery targets and you need a defensible way to set them system by system.
- Plan and record a restore testYou need to prove backups actually restore, for yourself and for an assessor or insurer, not just that the jobs succeeded.
- Work out what Microsoft 365 doesn't back up for youSomeone asked "doesn't Microsoft back that up?" and you need a clear answer for your tenant.
- Check whether your AI data can be recoveredYour team uses AI tools, vector databases or agents, and no one has asked what happens if that data is lost or poisoned.
Want a person to check the answer?
AI gets you a first draft. A KELYN engineer can tell you whether it would hold up in an assessment or a real recovery.