When we run an assessment, “Do you have backups?” is one of the easiest questions to get a yes to. Almost everyone does. The harder question — the one that actually matters — is “When did someone last restore from them and confirm it worked?” That one is usually met with a pause.
A backup is a promise about the future: that if today's data is lost, yesterday's can be brought back. An untested backup is a promise no one has ever checked. And the day you find out it was empty, corrupted, or three months stale is, by definition, the worst possible day to find out.
The ways backups quietly fail
They fail in undramatic ways. A job that started erroring out months ago and no one was watching the alerts. A drive that's been backing up the wrong folder. A cloud sync that faithfully copied your files — including the ones ransomware had just encrypted — right over your only clean copy. In every case the backup “ran.” It just wouldn't have saved you.
The other common gap is scope. A backup of the file server that doesn't include the line-of-business database, the email, or the configuration it would take days to rebuild. You restore the documents and discover the thing that actually runs the business wasn't in the picture.
What “tested” actually means
Testing a backup means performing a real restore, to a real location, and confirming the data is complete and usable — not just that a file came back, but that the system it belongs to comes back. It means knowing how long that takes, because “we can recover” and “we can recover within a day” are very different promises to make to your staff and your clients.
Good continuity planning puts numbers on it: how much data you can afford to lose, and how long you can afford to be down. Then it builds backups that meet those numbers and proves it on a schedule — before anything goes wrong.
The standard we hold
We treat a backup as untrustworthy until it has been restored and verified. Not because we expect ours to fail, but because the only backup worth having is one you've already watched come back. Hope is not a recovery plan. A tested restore is.