When a Successful Disaster Recovery Test Still Signals Failure

A Business Continuity & Resilience Awareness Week 2026 reflection on why drills can create false confidence, and what real readiness actually requires.

A recent disaster recovery test appeared, on the surface, to be a clear success. The client had defined recovery time and recovery point objectives for the system under test. The recovery steps were detailed in the test plan. The responsible personnel were present. The team recovered the service within the required targets, and all stated objectives were met. By conventional scoring, the exercise passed.

But a closer look told a very different story. Only one system administrator actually knew the recovery steps. When asked for the document guiding the process, it became clear that the procedure existed mainly in that individual’s memory. At the same time, the team repeatedly revisited the plan out of fear of making mistakes. Preparation is important, but hesitation driven by anxiety is a warning sign. So was this truly a successful test? Or was it a controlled demonstration that hid serious resilience gaps?

This question sits at the heart of Business Continuity & Resilience Awareness Week (BCAW+R) 2026, organized by The Business Continuity Institute, whose 19 May theme challenges a common assumption: “Think your crisis drills make you ready? Think again!” The campaign’s message is timely: scenario planning and tabletop exercises are useful, but they can also create false confidence if they are not designed to expose fragility, uncertainty, and human factors under pressure.

1. The “False Confidence” Trap
   Drills are often controlled environments. The scenario is known, the team is assembled, the systems are available, and the exercise usually follows a predictable path. Real crises are different. They evolve. They escalate. They introduce ambiguity faster than teams can process it. In drills, the problem is known. In reality, it changes while you are responding.
   Many rehearsals quietly assume full team availability, complete information, and working systems. But in an actual disruption, half the team may be offline, data may be incomplete, communications may be delayed, and decisions may need to be made before anyone feels fully ready. A test that succeeds only because the right people are present and the right knowledge happens to be in the room is not a proof of resilience. It is evidence of dependency.
    
2. When Recovery Lives in One Person’s Head
   One of the most dangerous outcomes of a DR exercise is the illusion that a documented process exists when in fact the organisation is relying on undocumented heroics. If only one administrator knows how to recover a critical service, then the recovery capability is fragile by design. The exercise may have validated that person’s expertise, but it did not validate the organisation’s resilience.
   This matters because real incidents do not wait for the ideal person to become available. If that administrator is unreachable, overwhelmed, or affected by the same disruption, the recovery plan may stall at exactly the moment it is needed most. A test should therefore ask not only, “Did we recover?” but also, “Could someone else have followed the process under pressure with the same outcome?” If the answer is no, the test exposed a key-person risk that must be addressed.
3. Failure-Friendly Culture: The Missing Ingredient
   The repeated review of the plan before each step was also revealing. On one hand, careful verification reduces careless errors. On the other, a visible fear of making mistakes can become a serious liability in a live crisis. Teams that are overly concerned with getting everything exactly right may hesitate when speed matters most. Under stress, hesitation can become paralysis.
   Resilient organisations build psychological safety into their response culture. They create space for people to raise concerns early, ask for help, and escalate uncertainty without fear of blame. In a crisis, silence is often the biggest risk—not mistakes. Teams that are rewarded for escalation rather than perfection are more likely to adapt quickly, surface weak signals, and prevent a manageable issue from becoming a major incident.
4. How to Stress-Test Plans for the Real World
   If organisations want to move beyond performance theatre and build real adaptability, their exercises must be designed to uncover hidden weaknesses—not conceal them. The goal should not be to prove that the plan works under ideal conditions. The goal should be to learn how the organisation behaves when conditions deteriorate.
   • Remove key people from selected exercises and require backups to lead recovery.
   • Test whether recovery steps are documented clearly enough for someone else to execute them without coaching.
   • Inject incomplete information, conflicting updates, and communication delays into simulations.
   • Simulate tool failure, access issues, or unavailable systems so teams practise manual workarounds.
   • Time-box decisions to reflect the pace and pressure of real incidents.
   • Measure not only technical recovery, but also decision quality, escalation speed, and clarity of communication.
   • Capture every workaround used during the exercise and convert undocumented knowledge into formal procedures.
   • Run after-action reviews that focus on learning, not blame.
   These practices help shift exercises from scripted validation to adaptive learning. They reveal whether the organisation can absorb disruption, redistribute responsibilities, and continue making decisions when certainty disappears. That is the real test of resilience.
5. So, Was the Test Successful?
   Yes, and no. Yes, the team met the stated technical objectives of the exercise. But no, the test did not fully prove operational resilience. Instead, it exposed two critical realities: first, the recovery capability depended too heavily on one person’s undocumented knowledge; second, the team’s fear of error suggested that confidence under pressure may be weaker than the test results implied. That does not make the exercise a failure. It makes it valuable—if the organisation is willing to treat the findings honestly.
   The message for Business Continuity & Resilience Awareness Week (BCAW+R) 2026 is clear: passing a drill is not the same as being ready for a crisis. Real readiness comes from exposing assumptions, documenting critical knowledge, cross-training people, and building a culture where teams can act, speak up, and adapt under pressure. If your exercises only confirm what you hoped was true, they may be giving you confidence you have not yet earned.

By Mueni Faith
HoD Operations, Sentinel Africa.