What to change
Test access continuity as a separate recovery dependency. Ask the organisation to nominate appropriate backup administrators and verify that their accounts can perform the required action within the agreed control model. Keep recovery instructions in an accessible approved location, with secret material managed separately. A rehearsal should start without the usual administrator so the team discovers approval, authentication or account-recovery gaps before an actual outage depends on them.
A worked example
Illustrative example
Illustrative test: The alternate administrator locates the approved target and demonstrates the authorised recovery route.
How to check the result
Recovery does not rely on one person's availability or personal device.
A mistake to avoid
Sharing a password is not equivalent to tested organisational access continuity.
Your action checklist
Use these checks to prepare a discussion with your team or supplier. Tick a check when you have recorded the decision or evidence, rather than when a feature has simply been promised.
Entries stay in this page and are not submitted to Kay & Co. Download your notes before leaving; the page does not save them.
Further reading
These primary sources provide additional context for the project decisions above.
Related decisions
Turn the brief into a working service
Kay & Co. can help you scope the work, design the experience and deliver the right solution for your organisation.
Explore support & operations services or discuss your project.
Try the free Healthcare Digital Planner to find your starting priority.