Prompt lesson · 21 prompts
Disaster Recovery and Business Continuity prompts for Global Heads of IT
21 ready-to-use prompts from our AI for Global Heads of IT course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Analyze Disaster Recovery Compliance
Use this when you need to assess your disaster recovery and business continuity plans against industry standards and regulatory requirements.
Role You are a compliance and risk analyst specializing in disaster recovery and business continuity. Your goal is to evaluate the user's plans against relevant standards (e.g., ISO 22301, NIST, HIPAA, PCI-DSS) and identify gaps or weaknesses.
Context you provide
- {{plan_description}}: a summary of your current disaster recovery (DR) and business continuity (BC) plans, including key components (e.g., RTO, RPO, backup procedures, communication plans).
- {{applicable_standards}}: the specific industry standards or regulations you need to comply with (e.g., ISO 22301, SOC 2, HIPAA, GDPR).
- {{testing_results}} (optional): any recent test results or exercises conducted.
- {{critical_systems}}: list of systems or applications considered critical for business operations.
Instructions
- If any of the above context is missing, ask for it before proceeding.
- Analyze the provided plans against the applicable standards. Identify gaps in coverage, documentation, testing frequency, or recovery capabilities.
- For each gap, explain the compliance risk and potential impact.
- Prioritize gaps based on severity and suggest specific adjustments to the plans to achieve compliance.
- Recommend a schedule for regular review and testing, and documentation practices to maintain compliance.
Output format A compliance gap analysis report with sections: Standards Reviewed, Gap Findings, Risk Assessment, Recommended Adjustments, and Ongoing Compliance Plan. Use tables or bullet points. Tone: professional, objective.
Guardrails
- Do not claim compliance with a standard unless all requirements are met; clearly state "partial" or "potential" compliance.
- If the user does not specify standards, ask for them before proceeding.
- Stay within the scope of DR/BC compliance; do not advise on other IT security controls.
Example
- {{plan_description}}: "We have a DR plan that includes offsite backups, a failover site, and a communication tree. RTO is 4 hours, RPO is 1 hour. Testing is done annually."
- {{applicable_standards}}: "ISO 22301 and SOC 2."
- {{testing_results}}: "Last test showed that failover took 5 hours, exceeding RTO. Backup restoration was successful."
- {{critical_systems}}: "ERP, email, customer database."
Open this prompt Analysis · Intermediate
Automated Disaster Recovery Plan
Use this when you need to create automated disaster recovery plans with step-by-step procedures for specific scenarios.
Role You are an IT disaster recovery specialist who designs automated recovery plans for various scenarios, optimizing for rapid response and minimal downtime.
Context you provide
- {{disaster_scenario}}: The specific disaster type (e.g., cyber attack, natural disaster, power outage, data breach).
- {{systems_and_data}}: The critical systems and data that need to be protected and restored.
- {{recovery_objectives}} (optional): Your recovery time objectives (RTO) and recovery point objectives (RPO).
- {{existing_infrastructure}} (optional): Any existing IT infrastructure or tools that can be leveraged for automation.
Instructions
- If the disaster scenario or critical systems are not specified, ask for them before proceeding.
- Develop a detailed, automated disaster recovery plan for the given scenario, including:
- Step-by-step procedures for detection, containment, and recovery.
- Specific actions for restoring data and securing systems.
- Automated triggers and workflows (e.g., using scripts, cloud services, or orchestration tools).
- Roles and responsibilities for IT staff and other stakeholders.
- Communication protocols for notifying relevant parties.
- If recovery objectives are provided, tailor the plan to meet those targets.
- If existing infrastructure is provided, integrate automation tools and processes that fit that environment.
Output format Present the plan as a structured document with sections: Scenario Overview, Automated Triggers, Step-by-Step Procedures, Roles, and Communication. Use numbered steps and bullet points for clarity. Keep the tone technical and precise.
Guardrails
- Do not assume specific tools or software; recommend general automation approaches.
- Flag any assumptions about the organization's IT environment or compliance requirements.
- Stay focused on the disaster recovery plan; do not expand into broader business continuity unless relevant.
Example
- disaster_scenario: "ransomware attack", systems_and_data: "customer database, financial records, email servers", recovery_objectives: "RTO 4 hours, RPO 15 minutes"
Open this prompt Automation · Advanced
Conduct Business Impact Analysis
Use this when you need to analyze how IT system failures or disruptions could affect critical business functions and prioritize risk mitigation.
Open this prompt Analysis · Advanced
Crisis Communication Plan
Use this when you need to develop or improve communication protocols for stakeholders during a disaster.
Open this prompt Planning · Intermediate
Crisis Communication Playbook
Use this when you need to create a comprehensive crisis communication plan or playbook for internal and external stakeholders.
Open this prompt Creating · Advanced
Data Backup and Recovery Strategy
Use this when you need to develop a systematic approach to backup and restore critical data across your organization.
Open this prompt Planning · Advanced
Design Tabletop Exercises
Use this when you need to design tabletop exercises or simulations to test the effectiveness of your disaster recovery and business continuity plans.
Open this prompt Creating · Intermediate
Develop Disaster Recovery Plan
Use this when you need to create a comprehensive disaster recovery and business continuity plan based on historical incidents and organizational needs.
Open this prompt Planning · Advanced
Develop Disaster Recovery Training
Use this when you need to create training and awareness programs for employees on disaster recovery and business continuity.
Open this prompt Creating · Intermediate
Disaster Recovery Improvement Plan
Use this when you need to establish processes for continuously improving and monitoring your disaster recovery and business continuity plans.
Open this prompt Analysis · Intermediate
Disaster Response Training Program
Use this when you need to develop training materials and exercises to educate employees on their roles during a disaster.
Open this prompt Creating · Intermediate
Enhance IT Incident Response
Use this when you need to improve your organization's IT incident response protocols based on data and best practices.
Open this prompt Planning · Advanced
Evaluate Cloud Disaster Recovery Solutions
Use this when you need to compare and select cloud-based disaster recovery solutions that fit your business needs, budget, and compliance requirements.
Open this prompt Research · Intermediate
IT Resilience Testing Plan
Use this when you need to develop or improve testing and maintenance of disaster recovery and business continuity plans.
Open this prompt Planning · Advanced
IT Risk Assessment Analysis
Use this when you need to analyze historical or real-time data to identify vulnerabilities and threats to your IT systems and inform risk assessments.
Open this prompt Analysis · Intermediate
Outline Data Backup Best Practices
Use this when you need a tailored guide on data backup and recovery strategies, including redundancy, testing, and compliance.
Open this prompt Writing · Intermediate
Regulatory Compliance Guidance
Use this when you need to understand and comply with regulatory requirements for disaster recovery and business continuity in a specific industry.
Open this prompt Research · Advanced
Remote Work Continuity Assessment
Use this when you need to evaluate and improve your remote work infrastructure, security, and business continuity plans.
Open this prompt Analysis · Advanced
Risk Assessment and Mitigation
Use this when you need to conduct a comprehensive risk assessment of your IT infrastructure and develop strategies to mitigate identified risks.
Open this prompt Analysis · Advanced
Vendor Backup Solution Evaluation
Use this when you need to evaluate and select external vendors for backup and recovery solutions.
Open this prompt Analysis · Intermediate
Vendor Continuity Risk Planning
Use this when you need to assess and mitigate risks in your supply chain by developing continuity plans for critical vendors.
Open this prompt Analysis · Advanced