The advantage of designing the recovery interaction in form
of wizard is that the operator has only a limited set of options, and it is
easy to make sure that the system supports all these options. The only support
that we need to add is to enable the operators to undo some of the recovery
decisions. Wizard forms allow the user to specify parameters gradually, and to
go back to previous forms before submitting the recovery command. Other means
to protect from recovery faults are typically application specific.