Quick answer
What business decision-makers need to know
A business can have several backup products and still be poorly prepared for an outage. Recovery depends on more than whether a scheduled job completed. You need to know which systems are protected, how quickly they need to return, who can access the backups and whether restoration has been tested.
Key takeaways
- Identify critical systems and business data.
- Define which services must recover first.
- Document where data lives across cloud, servers, devices and applications.
- Confirm which systems are backed up and identify gaps.
Backups are useful only when the business can recover
A business can have several backup products and still be poorly prepared for an outage. Recovery depends on more than whether a scheduled job completed. You need to know which systems are protected, how quickly they need to return, who can access the backups and whether restoration has been tested.
12 backup and recovery checks
- Identify critical systems and business data.
- Define which services must recover first.
- Document where data lives across cloud, servers, devices and applications.
- Confirm which systems are backed up and identify gaps.
- Set retention according to recovery needs and applicable obligations.
- Protect backup administration with controlled access and strong authentication.
- Reduce the chance that one incident can affect production and every recovery copy.
- Assign ownership for failed jobs, missed devices and capacity warnings.
- Test restoration of important files and systems and record results.
- Document who declares an incident, restores systems and contacts suppliers.
- Include Microsoft 365 and other SaaS dependencies in recovery planning.
- Review the plan after migrations, office moves and major system changes.
Recovery-readiness questions
- Which systems does the business need first after a major outage?
- How recent must restored data be?
- Who receives backup-failure alerts?
- When was the last restore test?
- Are recovery credentials protected?
- Can the business recover if its primary office or server is unavailable?
- Which vendors are required during recovery?
