If an organisation's measures regarding backups and, in particular, recovery are documented insufficiently (or not at all), this can significantly delay recovery. This in turn can result in delays in important processes (e.g. in production). It may also mean that a backup cannot be restored and the data is thus lost.

If information on recovery is only available digitally, there is a risk that it will also be lost in the event of major damage (caused by ransomware, for instance), which jeopardises the recovery process.