Illustrative stock imagery from Pexels. Images do not identify the people, premises or events discussed and do not imply endorsement.
Reviewed 26 October 2026. Original publication date retained: 2025-11-04.
A retail service may depend on payment, ordering, fulfilment and communication systems that recover at different times. An audit can examine how recovery is coordinated without repeating unsupported loss estimates or assigning blame for a named attack.
Questions to follow in an audit
- Which service dependencies must be available before orders resume?
- Who approves the readiness decision and customer communication?
- How are exceptions and recovery lessons recorded?
Connect the records with practice
Follow a recovery exercise through dependency checks, outstanding issues, approval to resume and subsequent review of the service.
These are illustrative audit trails, not findings about a named organisation, technical instructions or a guarantee of a particular result. The appropriate evidence depends on the activities, risks and agreed scope. The organisation remains responsible for its operations and legal obligations.
AAA provides independent certification audits. Confirm the applicable standard edition, scope and customer requirements before agreeing a programme. Request an indicative price or discuss your proposed audit.
Further reading: ISO information security.