MVT Systems — Managed IT, Microsoft 365 & Cybersecurity South Africa
All insights
Backup & DRField notes

Why Backups Are Not Enough Unless You Test Recovery

A green backup dashboard is reassuring. It is not the same as proof that you can recover. Here is the difference.

Why Backups Are Not Enough Unless You Test Recovery — MVT Systems article illustration

We have walked into incidents where every backup job was green for months and not a single one could be restored. The lesson: backup is a service, not a switch. Treat it like one.

Monitor the backup, not just the job

Most backup software reports per-job success. Real monitoring covers protected vs unprotected workloads, retention vs policy, storage consumption trends and abnormal change rates that can hint at ransomware.

Restore testing is the only real test

A restore test answers three questions:

  • Can we recover this workload at all?
  • Can we recover it inside the agreed RTO?
  • Did we lose more than the agreed RPO?

Anything else is theatre. We restore representative workloads on a quarterly cycle, with evidence.

RTO and RPO, defined per workload

  • RTO — the maximum tolerable downtime.
  • RPO — the maximum tolerable data loss.

Different workloads have different answers. Finance ERP isn't a marketing site; both should be designed for what they actually need.

Microsoft 365 backup

Microsoft is responsible for keeping the service running. You are responsible for the data inside it. We back Exchange Online, OneDrive, SharePoint and Teams up to independent storage with long retention and immutability.

Server & VM backup

Image-level backups with Veeam or Commvault, with copies to immutable cloud storage. On-prem backup infrastructure has its own admin identity, separated from the production AD.

Immutable storage

WORM and object-lock targets mean an attacker with domain admin cannot delete your backups. If your backup target shares identity with production, assume it is compromised in a ransomware event.

Bringing it together

Our backup & disaster recovery practice covers Microsoft 365, servers and cloud workloads with documented RTO/RPO and scheduled restore testing. Combined with our cybersecurity services you have prevention, detection and recovery in one place.

Book a backup & recovery review →

Let's talk

Your business future-proofing partner.

Tell us what you're building. We'll bring the strategy, the platforms and the people to make it happen.

Contact us / Book a security review

Tell us about your business

We'll get back to you within one business day.

By submitting this form you agree to MVT Systems contacting you about your enquiry. We handle your information in line with our privacy policy.