Plan, exercise, respond, prove
Four stages, one record. No re-typing between plan, exercise and assurance.
Plan
Map what matters and set recovery objectives.
Exercise
Run tabletop exercises straight from plans.
Respond
Coordinate crisis response in real time.
Prove
Turn work into audit-ready evidence.
A plan is either proven or it isn't
Proof rises as work is done and drops when a plan is edited, so claims never outlive their version.
- Stage 1
Unproven
Drafted, never tested.
- Stage 2
Asserted
Signed off by owners.
- Stage 3
Exercised
Rehearsed and recorded.
- Stage 4
Sealed
Hashed, signed and timestamped.
- Stage 5
Evidenced
Reviewed by an auditor.
Live in weeks, not quarters
Start from the documents and directory you already maintain.
Start from what you have
Import Word, Excel, SharePoint and OneDrive files.
No staff database to build
Connect Entra ID, Google Workspace, AD or LDAP.
One record, many frameworks
Map the same work to every standard you report against.
Mapped to the standards you report against
Record once. Map to whichever regime asks.
NHS England EPRR Core Standards
48 standards mapped to plans, exercises and evidence.
ISO 22301
BCMS artefacts and management-review evidence.
FCA / PRA operational resilience
Impact tolerances and scenario testing records.
SOC 2 Type II
Availability and change-management evidence.
Cyber Essentials Plus, NHS DSPT and ISO 27001 alignment. See our accreditations.
Who it is for
One record, scoped to each role.
Head of resilience
Programme view of coverage, gaps and overdue work.
Business continuity manager
Plans, exercises, actions and reminders in one flow.
Crisis and emergency planning lead
Scenarios, injects, war-room records and comms.
Audit, risk and assurance
Verifiable bundles with read-only auditor access.
Tell us where your programme stands
Send us your frameworks and existing documents. We will map the lifecycle for your organisation.