OR-13 IT Operations & Resilience

Backup Restoration Testing

Backups are proven recoverable.

Domain
IT Operations & Resilience
Control type
Detective
Automated / manual
Manual
Frequency
Periodic
Framework reference
MAS TRM – Resilience

What good looks like

Restoration tests are performed periodically to confirm recoverability.

Risk if it fails

Backups that cannot be restored.

How Tess tests it

2 tests — each concludes only on cited evidence.

Restore-test schedule defined

Design
Procedure
Inspect the schedule.
Expected
Periodic restore tests defined.
Sample
1 (design inspection)
Evidence
Restore-test reports/results.

Restore test performed & successful in period

Operating
Procedure
Inspect the restore-test report.
Expected
Successful restore evidenced.
Sample
Judgmental, by population (e.g. 10–25)
Evidence
Restore-test reports/results.

Evidence Tess looks for

Restore-test reports/results.

More in IT Operations & Resilience

OR-01 IT Governance & Oversight OR-02 IT & Information Security Policies OR-03 IT Risk Assessment OR-04 Asset & Configuration Management

Want Tess to test OR-13 against your evidence?

Book a demo