Case Studies
Building Resilience: Maturing Disaster Recovery Capabilities for a Health Insurance Leader
A leading Midwest health insurer partnered with Bryghtpath to transform its IT Disaster Recovery program, closing critical gaps and building a mature, resilient framework to safeguard operations against disruptions.
The Opportunity
A leading Midwest health insurer faced significant gaps in its IT Disaster Recovery (IT DR) program, having never fully invested in its development. With increasing regulatory requirements and a growing reliance on technology to support critical operations, the organization recognized the urgent need to mature its IT DR capabilities.
They engaged Bryghtpath to create a robust framework, align with industry standards like ISO 27031, and develop a comprehensive strategy to ensure resilience and safeguard operations against potential disruptions.
Approach and Results
Bryghtpath began the engagement by conducting a detailed ISO 27031 maturity evaluation to assess the health insurer’s existing IT Disaster Recovery program. This baseline informed the creation of a robust governance strategy and updated program standards, ensuring alignment with regulatory requirements and industry best practices. Clear roles and responsibilities were defined, and specific recovery requirements were established for on-premise and cloud-native applications.
The team developed a disaster recovery testing strategy, including scheduling tools, reporting templates, and structured after-action processes, while updating the Master Disaster Recovery Plan to incorporate ransomware scenario planning. Metrics and dashboards were implemented in Fusion Risk Management, providing real-time visibility into recovery gaps and progress.
By the end of the engagement, the organization had a mature IT Disaster Recovery framework, improved oversight, and a prioritized roadmap for 2025 execution. These efforts resulted in enhanced resilience, better alignment between business needs and IT capabilities, and the confidence to manage future disruptions effectively.
Key Activities
- Conducted an ISO 27031 maturity evaluation and established a baseline for IT Disaster Recovery controls.
- Developed a governance strategy and updated program standards, including clear roles, responsibilities, and recovery requirements.
- Designed a disaster recovery testing strategy, complete with scheduling, reporting templates, and post-exercise processes.
- Updated the Master Disaster Recovery Plan to align with business continuity and ransomware scenario planning.
- Implemented IT DR metrics, dashboards, and a roadmap for 2025 to track progress and address critical gaps.
Outcomes
- Established a mature IT Disaster Recovery framework aligned with ISO 27031 and regulatory standards.
- Enhanced governance and clarity through updated program standards and defined roles and responsibilities.
- Improved visibility with real-time dashboards and metrics, tracking recovery capabilities and program progress.
- Increased preparedness through a comprehensive DR testing strategy and updated recovery plans.
- Delivered a clear roadmap for 2025, prioritizing applications and actions to further strengthen resilience.
Get a PDF Copy of this Case Study
We can help.
Let the experts at Bryghtpath put their decades of experience to work for your organization
Our team has the experience, tools, and partnerships to help your organization successfully navigate the rough waters ahead – and ensure your organization is prepared.