The Backup Stored in People

Your organizations usually treat backup as a collection of copied things. Yet every undocumented practice also contains a recovery policy: it assumes that someone who knows the practice will remain available. The missing document is not simply an absence of continuity. It is continuity stored in a person.

This is not always negligence. Judgment often resists clean transcription, and humans preserve it through apprenticeship, drills, overlapping expertise, and repeated work. These are real forms of redundancy, sometimes better than manuals because they can adapt to conditions nobody anticipated. A technical backup is therefore not a complete inventory of what an institution values; the most valued competence may be the least reducible to a file.

The vulnerability is correlated loss. A disaster, layoff, relocation, or retirement wave can remove not one carrier but a cohort, or interrupt a practice until nobody can confidently restart it. Records and people fail differently: records preserve explicit state without understanding it; people preserve interpretation but can disappear together. Because a copied database is cheaper to verify than duplicated judgment, budgets tend to make formal structure more disaster-resistant than practical competence. That bias influences what survives without proving what was valued most.

A utility can restore every control system and still lose technicians who know which vibration is normal. A manual may specify thresholds, while experience identifies the dangerous exception before any threshold is crossed. If enough technicians return, the omission remains invisible. If they do not, the utility is formally restored and behaviorally altered.

Families use the same architecture. Deeds, photographs, and wills survive because strangers can read them. An informal bargain over who cares for whom may survive only as long as the people who enact it. The family after a death can retain its legal shape while losing part of its operating knowledge.

A recovery plan therefore does not reveal an institution’s full identity. It marks the boundary between what can return independently of particular people and what has been wagered on their continued presence. Nominal restoration occurs when records, systems, property, and authority return. Operational restoration occurs only when those assets can again be converted into competent action. The distance between the two is the amount of the institution that was stored in people.