Your backup is only useful when you can restore it

The recommendation

CISA recommends offline, encrypted backups and regular tests to confirm that copies are available and usable. Separate administrator accounts and least privilege are also part of the protection. [1]

A test for this week

• Choose an important file, mailbox or application and a recovery point.
• Restore to a separate location so that originals and production are not overwritten.
• Open the restored material and check both content and function.
• Record the result, time taken and who will address any problems.

Your checkmarks are stored only in this browser.

For businesses

We recommend deciding how much data loss and downtime you can tolerate. Check that backups also cover configuration and other components needed to restart operations. Appoint an owner and a deputy.

For private users

Start with photos, important documents and information needed to recover your accounts. Check what is actually backed up. Synchronisation can propagate a change or deletion, so check for separate copies and recovery options.

When is it done?

When the chosen material can be restored and used within the time you need. Then repeat the test at a scale appropriate to your environment. Start small.