Due communications needing to be cross-organizational and up and down the layers of the organization, lots of discussion is common on what to generically call a malicious or non-malicious event that ultimately results in the need to recover from point in time backups.   What name for the "event" has your organization chosen to broadly use? Note: It is understood that it is often necessary to report "Cyber-Incidents."

Clarity is very important here. Who needs to know, what do they need to know, why do they need to know it, and how will it affect them. Emphasize what is most important to them using non-technical language. Include timelines and tell them when to expect the next communication from you/your team to avoid constant update requests.

In this case, consider using "Data Rollback" or "Data Recovery"

Here is a sample communication template.

Subject: Data [Rollback/Recovery] in progress

Please be advised that a data rollback is underway to address an unexpected system issue. This means we are restoring our systems' data to a previous point in time to ensure accuracy and stability.

What this means for you:

- [System] will be unavailable until [Time/Date].
- Any data entered into [System] prior to [Time/Date] will need to be re-entered.

We anticipate this process will be completed by [Time/Date].

We appreciate your patience as we work to ensure the integrity of our information.

Our next update will be sent at [Time/Date]. If you have urgent questions relating to this matter, please contact [contact information].

I hope this is helpful.