In this article
The only proof that a backup works is a successful restore, carried out with data chosen by the decision-makers and with the time measured. In a managed backup service, this test is routine: a quick test every month, a server restored every quarter and a full exercise every year, always with a written report. This guide from DataRoad - IT Services and Consulting gives you the 30-minute script for requesting that proof, even without technical knowledge.
The essentials
- “Completed” is not “recoverable” The automatic notification confirms that a copy was made, not that it opens or how long it takes to get the company working again.
- 30 minutes is enough An old file of your choice, a deleted email and, if there is a server, a copy booted in an isolated environment.
- The 3-2-1-1-0 rule 3 copies, 2 types of media, 1 off-site, 1 that cannot be deleted, 0 errors in the last test.
- Minimum frequency Monthly, quarterly and annually, depending on the type of test.
Five reasons a “green” backup fails
- Incomplete scope A new folder, the invoicing database or an administrator's mailbox was left out.
- Damaged copy Corrupted or partial, and nobody has opened it since it was created.
- Attack on the copies The attacker spent days on the network and deleted or encrypted the backup before revealing themselves.
- Lost knowledge Passwords, licences or the procedure were held by someone who has since left.
- Slow restore The copy sits on a slow cloud service or on a disk that has to be transported, and recovery takes days.
Cybersecurity authorities say the same. The ransomware guide from CISA, the US agency, recommends offline, encrypted copies of critical data and regular testing of their availability and integrity. The UK's NCSC has published its own principles for ransomware-resistant backups.
The 30-minute test script
Book half an hour with your provider, in person or by video call with screen sharing. Management chooses what is restored, not the provider.
- 0–5 min · Scope — ask for the list of what is protected (servers, computers, Microsoft 365, databases, management applications) and, above all, of what is not.
- 5–12 min · Old file — choose a document that existed three months ago, such as an invoice or a contract, and ask for it to be restored to a separate folder. Open it.
- 12–18 min · Deleted email — ask for a deleted message to be restored from a mailbox of your choice. In Microsoft 365, this step reveals whether there is a dedicated backup or only Microsoft's recycle bin; the difference is explained in the Microsoft 365 backup most companies are missing.
- 18–26 min · Server — ask for a copy to be booted in an isolated environment, without touching the original. Watch the system start, open the main application and note the time.
- 26–30 min · Immutable copy — ask to see where the off-site copy is, whether it is immutable and for how many days. Ask for the written report.
If any step does not fit within 30 minutes, that is already information. It is no reason to panic, but it is a point to fix with a deadline.
The report you should keep
- Who and when Date, time and the person responsible for the test.
- What and how long Each item restored and the duration of each restore.
- Failures Errors found and the planned correction date.
- External protection Confirmation of an off-site copy and an immutable copy.
3-2-1-1-0: the right questions for each number
| Number | Meaning | Question for the provider |
|---|---|---|
| 3 | Three copies: the original plus two more | “Where are the two copies besides the original?” |
| 2 | Two types of media, for example local disk and cloud | “If the backup appliance fails, which is the other copy?” |
| 1 | One copy off-site | “If the office burns down, where do I restore from?” |
| 1 | One copy that cannot be deleted or altered for a set period | “Can an attacker with the administrator password delete it?” |
| 0 | Zero errors in the last test | “When was the last test and where is the report?” |
Immutable, in simple terms: a safe with a time lock. Once the copy is inside, nobody can delete or alter it until the period ends — not the provider, not an administrator, not whoever has stolen the passwords. It is the last barrier against ransomware.
Recommended testing schedule
| Test | Minimum frequency | Participants |
|---|---|---|
| Restore of random files and emails | Monthly | IT partner |
| Boot of an isolated server or virtual machine | Quarterly | IT partner, with a report to management |
| Full exercise (the 30-minute script) | Annually | IT partner and management |
| Extraordinary test | After major changes: new server, migration, new application | IT partner |
The tests also confirm the two numbers that matter to the business: how long the company can stand still and how much work it can afford to lose. How to define them is explained in disaster recovery for SMEs.
DataRoad IT Unlimited
Talk to DataRoad. We assess your operation and propose the right plan.
Checking restores in an international audit
In the IT audit of the France Affiches group — a French large-format printing company based in Antony, in the Paris region — the DataRoad team travelled to the premises to survey the network and systems on site. Servers, virtualisation, privileged and former-employee accounts, endpoint protection and backups were analysed, with one clear criterion: confirm that the copies can be restored, not merely that they ran.
The result was a written picture with priorities: immediate risks, technical debt to plan for, and what is working well and needs no investment. It is the 30-minute test applied to the entire infrastructure.
Frequently asked questions
The backup runs every day. Isn't that enough?
No. Running daily proves that the copy exists, not that it can be restored. Only a recorded restore test confirms that the data is complete and how long it takes to recover.
Can a restore test damage the original data?
Not when done properly. Files go to a separate folder and servers boot in an isolated environment, with no connection to production. The original remains intact.
How long should restoring a server take?
It depends on the volume and where the copy is. What matters is that the time is measured and compatible with how long the company can stand still. If the test shows a day and the company can only cope with two hours, there is a decision to make.
What exactly is an immutable backup?
A copy that, once written, cannot be deleted or altered by anyone for a defined period. It is the most effective defence against ransomware that tries to destroy backups.
How DataRoad manages backups
In our managed backup service, test restores are part of the routine. We monitor copy failures, keep an off-site copy and an immutable copy, and document every test. If the worst happens, the business data recovery team knows what exists and where; the guide on the first hours of a recovery explains what to do in the meantime.
On the IT Unlimited Premium plan, on-site support is unlimited: if recovery requires someone at the office, there is no separately invoiced call-out.
Next step: an accompanied restore test within 5 working days
We run the 30-minute test with you, apply the 3-2-1-1-0 rule to your infrastructure and deliver a report with real recovery times and priority fixes. No-obligation proposal.
More than 10 workstations · support contract · remote, on-site and telephone support
