Better IT Disaster Recovery and Procedures to Improve Response after Computer Crime

A lack of an effective disaster recovery plan (DRP) can negatively impact business outcomes following a cyberattack. Information technology (IT) managers are concerned that the lack of DRP may increase the risk of ransomware, fines, and public distrust. Grounded in the unified theory of acceptance and use of technology, the purpose of this qualitative pragmatic inquiry study is to explore strategies that some IT managers use to implement a DRP. The participants are four IT managers in the southeast United States. Data were collected through semistructured interviews and a review of publicly available documents. Through thematic analysis, three themes were identified: (a) implementation during attack, (b) continuous training, and (c) implementation constraints. The key recommendations are that organization should include DRP into their cybersecurity strategy to allow recovery and continuing operations after a cyberattack. The implication for positive social change is that these strategies may enable the continuation of critical services in facilities such as hospitals, helping to prevent life-threatening situations during a disaster.