Definition
Whether a decision can be undone, and the people it decided about restored, at three levels: technical (the system can roll the change back), operational (the people who run it can do so in practice, by a stated deadline), and institutional (the institution can carry on without the system while it does). Reversibility is measured as time to restore, and a level with no evidence counts as not reversible.
Tests that show it is in place
- Critical actions have tested rollback or remediation paths that restore data and access.
- Time-to-restore targets are met during drills and documented in the repair log.
Evidence to keep
- Artifact: Documented rollback plan with owners, restoration steps, and eligibility criteria for reversals.
- Behavior: Reversal executed during drills or incidents with people restored to their prior state.
- Metric: Time-to-restore targets tracked and met across reversal events.