Ask when the last successful restore was performed — not the last successful backup. The two are different questions, and only one of them tells you anything.
Backup software is very good at reporting that a backup completed. That report says a job ran and wrote data somewhere. It does not say the data is readable, that the retention window covers the incident you will actually have, or that anyone knows the procedure to get it back.
We ask this question in nearly every assessment. The most common answer is a pause, followed by some version of “I assume it works, the dashboard is green.” That is not a criticism of the people answering — testing restores is genuinely tedious, and it never makes it above the line on a busy week.
If a critical file was deleted ninety days ago and nobody noticed until today, could you get it back? The answer exposes your real retention window, which is usually shorter than people assume — particularly for cloud platforms where the defaults are modest.
None of this requires new software to investigate. It requires someone to pick one system, attempt a restore into a scratch location, and write down how long it took and whether it worked. An afternoon of unglamorous work converts an assumption into a fact.
If it works, you have documented evidence for your insurer and your clients. If it does not, you found out on a Tuesday of your choosing rather than during an incident.
Along with fourteen others. The checklist is free, and useful whether or not you ever speak to us.
Get the 15-Point Checklist →