Disaster Recovery (DR)

Disaster Recovery (DR) is a structured plan that enables you to restore your IT systems, data and business processes within a predetermined timeframe following a system failure, cyberattack, fire or other disaster. It comprises technical measures such as backups, redundant servers and recovery scripts, as well as agreements on who does what and how to inform customers and staff. For companies that rely on their website, online shop or online systems, a functioning disaster recovery plan is the difference between being offline for a few hours and suffering days of lost revenue or reputational damage.

How Disaster Recovery works in practice

A disaster recovery plan consists of four building blocks. First, you identify which systems and data are critical: your online shop, CRM, email server or customer database. Next, you set two targets: the Recovery Time Objective (RTO), the maximum time a system is allowed to be offline, and the Recovery Point Objective (RPO), the maximum amount of data loss you are willing to accept. For example, an online shop processing 500 orders a day would have an RTO of 4 hours and an RPO of 15 minutes. You then implement technical measures such as automated backups to an off-site location, redundant hosting or a standby environment. Finally, you test the plan every quarter by running through a simulated outage. In practice, we see that small and medium-sized companies often do have backups, but lack a clear recovery process or testing protocol.

Why Disaster Recovery is more urgent now than it was five years ago

Disaster recovery originated in the 1980s amongst large banks and insurers that needed to protect their mainframes. For SMEs, it was for a long time too expensive and complex. Since ransomware attacks have increased sharply since 2017 and the average downtime of an online shop results in an immediate loss of turnover, a recovery plan has become both affordable and necessary for smaller organisations too. Cloud hosting and automated backup tools – such as those included as standard with managed WordPress hosting – have reduced the costs. At the same time, companies are more vulnerable: an online shop that generates 60 per cent of its turnover online cannot afford to be down for a single day. Furthermore, the Dutch Data Protection Authority states that, under the GDPR, you are obliged to take appropriate technical measures to prevent data breaches or to remedy them quickly.

What Disaster Recovery delivers for your company

A functioning disaster recovery plan prevents a single outage from paralysing your company for weeks on end. In the event of a ransomware attack, you can fall back on a clean backup within hours rather than paying a ransom. In the event of a server crash, you can continue operations on a redundant environment whilst restoring the main server. This not only saves revenue but also preserves trust: customers who cannot place an order for three days will shop elsewhere. In our WordPress support and maintenance projects, we’ve found that companies with a tested recovery plan are back online within two hours on average, whilst those without a plan sometimes take days to reconstruct their data. Furthermore, you’ll comply with GDPR requirements and, in the context of tenders or ISO certifications, be able to demonstrate that you’ve arranged for business continuity. Another benefit is that you’ll gain a better understanding of your own infrastructure, which also helps with web development and system integrations outside of emergencies.

Disaster recovery is not just insurance against fire or flooding. In practice, you’ll use the plan in the event of ransomware attacks, human error such as accidentally deleting a database, hardware failures at your hosting provider, or DDoS attacks that take your site offline. Below are four situations in which a disaster recovery plan makes all the difference for small and medium-sized companies.

Ransomware attack on your online shop or CRM

An employee clicks on a phishing link and within an hour all files are encrypted. Without a disaster recovery plan, you’re at the mercy of the attackers or will have to spend weeks manually reconstructing data. With a tested plan, you can switch to a backup from four hours ago, reset your passwords and be up and running again within half a day. For an online shop handling 200 orders a day, that saves tens of thousands of pounds in lost turnover. Please note: backups must be offline or immutable; otherwise, the ransomware will also encrypt your backup. In our managed WordPress hosting environment, we therefore run daily incremental backups to an external location with a 30-day retention period.

Server crash or data centre outage at your hosting provider

Your hosting provider reports a hardware failure and your site is offline. Without disaster recovery, you’ll have to wait for the provider to resolve it, which can take hours or even days. With a recovery plan, you’ll have a secondary environment ready, to which you can redirect your DNS within 10 minutes. For B2B service providers with lead forms on their site, every hour of downtime means missed enquiries. A failover setup doesn’t have to be expensive: a static version of your site on a second server is often enough to accommodate visitors. For critical online shops, we implement redundant databases with real-time replication, ensuring the RTO remains below 15 minutes. This falls under server-side rendering strategies and infrastructure design.

Human error during database migration or update

A developer accidentally runs a DELETE query on the production catalogue, or a plugin update breaks the checkout process. Without a backup, you’ll spend hours restoring data from individual exports or you’ll have to let customers down. With a disaster recovery plan, you can restore the system to its last working state within 20 minutes. At Monkey Vision , we take a snapshot before every major update and test the recovery process in a staging environment. This prevents a technical error from directly affecting customers. This is particularly important for small and medium-sized companies with limited in-house IT expertise: a WordPress maintenance contract with automated backups and a rollback function saves a lot of stress.

When is Disaster Recovery the right investment, and when is it not?

A disaster recovery plan is advisable as soon as downtime of your website or systems results in immediate loss of turnover or reputational damage. Examples include online shops, SaaS platforms, booking systems or B2B sites with lead generation. For a simple portfolio site or a blog with no commercial function, a weekly backup is often sufficient. Bear in mind the balance between RTO and costs: an RTO of 15 minutes requires redundant infrastructure and can easily cost thousands of pounds a year, whilst an RTO of 4 hours can be achieved with a good backup strategy for a few hundred pounds a year. Ask yourself: what is the cost of a day’s downtime in terms of turnover and customer confidence? If that amount exceeds the annual investment in disaster recovery, the plan is cost-effective.