BACKUP AND RECOVERY CHECKLIST

Use this to review whether your business can recover quickly from a disruption.

1. Business critical files
- What files or systems would stop the business if they were lost?
- Are these files included in the backup schedule?
- Where are they stored?

2. Backup frequency
- How often are critical files backed up?
- Is the frequency high enough for current business activity?
- Are changes made throughout the day being protected regularly?

3. Storage location
- Are backups stored offsite or in a different location from the main device?
- Is there a cloud copy, local copy, or both?
- Can backups be accessed quickly if the primary system fails?

4. Recovery testing
- Has anyone tested restoring files in the last year?
- Do the team members know how to recover core data?
- Have restore times been reviewed?

5. Recovery responsibility
- Who is responsible for backups and recovery?
- Is there a documented process for restoring critical data?
- Is there a clear escalation path for emergencies?

6. Email and communications
- Are email archives or critical communication records protected?
- Do mail systems have a recovery path if cloud or local storage fails?

7. Cybersecurity and ransomware
- Is data backup protected from ransomware or unauthorised access?
- Are access controls in place for backup storage?
- Is one backup copy isolated from common attack vectors?

8. Business continuity
- If internet access or hardware fails, what work can continue?
- Are there alternate systems or temporary workflows?
- What is the acceptable downtime for core tasks?

9. Review and action
- What are the top three recovery risks in the business?
- Who owns each issue and when will it be fixed?
- When will the backup strategy be reviewed again?

If your organisation cannot confidently restore core files and business systems, it is worth a formal technology review.