Having a backup does not prove that the enterprise will be able to resume work after a data loss. The copy must be available, intact and usable with the necessary tools. The verification therefore concerns the restoration, in addition to the recording of the save.
NIST has published a guide for service providers on the conduct, maintenance and testing of backups. The reference suggests an operational question: Has anyone verified that the files can be recovered under the intended conditions? The completed execution message alone does not answer this question.
I propose to identify essential data, responsible and acceptable time of interruption. A hypothetical example is a customer archive that can only be retrieved from an account that is no longer accessible. The copy exists, but the path needed to use it is incomplete.
A test should be circumscribed and carried out without compromising work data, with competent assistance when necessary. You need to record what is missing and correct the process. The separation of copies from the original system must also be designed according to the context. The expected result is a verified recovery capability, kept up-to-date when changing applications, data, and responsible people.
