Business continuity and disaster recovery are the activities of the ZT implementation preparation phase that ensure the resiliency of the organization’s operations in the event of disruption. Business continuity refers to the process of maintaining or restoring the essential functions of the organization during and after a crisis, such as a natural disaster, a cyberattack, or a pandemic. Disaster recovery refers to the process of recovering the IT systems, data, and infrastructure that support the business continuity. ZT implementation requires planning and testing the business continuity and disaster recovery strategies and procedures, as well as aligning them with the ZT policies and controls.

References =

Zero Trust Planning - Cloud Security Alliance, section “Monitor & Measure”

Zero Trust architecture: a paradigm shift in cybersecurity - PwC, section “Continuous monitoring and improvement”

Zero Trust Implementation, section “Outline Zero Trust Architecture (ZTA) implementation steps”