Part III · Chapter 6 · The Window · lesson 12
Defend your period to a buyer who wanted a longer one
15 min
Builds on How long does the period have to be, and who decides?
Part III · Chapter 6 · The Window · lesson 12
15 min
Builds on How long does the period have to be, and who decides?
A buyer has read your report, found the period on the second page, and written back: we were expecting twelve months.
You have five. The five are honest, evidenced and chosen for reasons you can state. This lesson is about stating them — and about the one control that makes the answer concrete rather than defensive.
Pick the control whose cadence your period cannot comfortably hold. For most organisations that is the restore test: it runs rarely, it is expensive to run, and a short period either contains one instance of it or none.
Decide · backup-restore-test
A backup is a hypothesis and a restore is the experiment. Nearly every organisation has backups; a much smaller number have evidence that data came back out of one, into a working system, within a time anybody had agreed to. This control is about the second thing, and the first thing only matters because it is a precondition.
The decision
What you restore, how far you take it, and how often. A restore into a scratch environment proves the archive is readable; a restore that an application then successfully serves proves considerably more and costs considerably more. Deciding which of those you are claiming, and saying so, is the control. So is deciding what happens when the test fails, because a failed restore test during business hours is good news arriving at an inconvenient time.
Where this goes wrong
The backup job reports success and the success is monitored, which makes the whole area feel covered. Nothing in that signal speaks to whether the archive can be read, whether the schema still matches, or whether anybody holds the key, and each of those failures is silent right up until the restore that was not a test.
Does this apply to you?
The decision you just recorded gives you the material. The defence is four sentences and it is better in this order.
Why these dates. Not an apology. A date the period opened and the reason it opened then — the controls were standing by then, or the organisation started then, or the previous period closed then. A period with a reason is a decision; a period with no reason reads as the longest one you could get away with.
What they cover. The controls with a cadence shorter than the period have multiple instances inside it, and those are the ones the opinion is strongest about. Name them. This is the part of the answer that is actually good news and almost nobody leads with it.
What they do not. The control you just decided about is the honest example. If it runs annually and your period is five months, the period contains at most one instance, and one instance is a fact rather than a pattern. Say so before the buyer finds it, because they will find it in the page listing what was tested.
What happens next. The date the next period closes. A five-month period with a twelve-month period already scheduled is a sequence. A five-month period with nothing behind it is a position.
Check
Sometimes the buyer's twelve months is not a preference.
A regulated buyer may have an obligation of their own that specifies how much continuous coverage they need from a supplier. A buyer under their own examination may need your period to overlap theirs. In both cases the number is not negotiable for them, and arguing the merits of five months is arguing with the wrong person.
What changes is the shape of the answer. The four sentences still get said, but the question becomes commercial rather than technical: whether to open a twelve-month period now and when they would have it, whether an interim arrangement carries the contract until then, or whether this is a deal that arrives a year from now.
That is a better conversation than defending the period, and the only way to reach it is to establish early which kind of twelve months you are being asked for. One question does it: is twelve months your preference or your requirement?
Everything else in a certification responds to effort. More people on remediation closes gaps faster. A bigger sample tightens a bound. A clearer boundary reduces the work.
The period is the one input that does not. A twelve-month period ending next spring needed to open last spring, and no amount of money, attention or willingness changes what was happening in your organisation in April of last year. The only lever is the opening date of the next one, and the only time to pull it is now.
Which is the thesis of this whole track read backwards. It opened with a photograph and a film; it ends with the observation that film takes as long to shoot as it takes to watch, and that the shooting has to have already started.