PlannedOperations & response

Backup, recovery and continuity testing

A backup you have never restored is a hypothesis. This is how to test it.

LevelPractitioner
Material3 modules, 9 lessons
Reading time1 h 40 m
StatusPlanned — not open

This course is not available yet

It is planned and the outline below is a first draft, so it may yet change. There is no enrolment and no date — when it is ready it will be on this page.

If you need this capability now rather than later, Backup & disaster recovery is the service that covers it, or talk to us.

Who it is for

Whoever is accountable for the organisation recovering, which is frequently not whoever configured the backups.

Practitioner. For people who administer these systems day to day.

No prerequisites. Nothing is assumed beyond using a computer at work.

What you will be able to do

  • State a recovery point and recovery time objective, and tell whether your current arrangement meets them
  • Identify which copies would survive an attacker with administrative access
  • Run a restore test that proves something, and schedule the next one
  • Write a continuity plan short enough to be used under pressure

Outline

3 modules, 9 lessons, 1 h 40 m of material. The times are the sum of the lessons rather than a round figure.

01Objectives before technology

How much data you can lose and how long you can be down are business decisions, not storage ones.

Recovery point and recovery time10 m

Defining both per system, and what each costs to improve.

What actually needs backing up12 m

Data, configuration, identity, and the things that only exist in somebody’s head.

Dependency order10 m

Restoring in an order that works: identity before the applications that authenticate against it.

02Surviving an attacker

Ransomware looks for the backups first, and often finds them.

Immutability and air gaps12 m

What each resists, and what "immutable" means in each product.

Credential separation10 m

Backup systems that trust the same directory as everything else.

Retention against a slow compromise10 m

How far back you need to be able to go when the intrusion predates the alert.

03Testing

The only part that converts a hypothesis into a fact.

A restore test that proves something14 m

Scope, success criteria, and testing the thing you would actually restore.

Tabletop exercises12 m

Finding the decisions nobody has made, cheaply.

Writing the plan down10 m

Short, current, and available when the systems holding it are not.

Format. Written lessons with a restore-test template to adapt. Delivery mechanism is not built yet.

Would you rather we just did it?

This course exists because the work behind it is work we do. If you need the result rather than the skill, backup & disaster recovery is the service that covers it.