Recover
Backup and recovery readiness
Know you can get your business back, not just that backups ran.
We check what is backed up, how long it is kept and whether it is protected from the same attack that hits your systems, then coordinate restore tests and recovery exercises and record the evidence. We keep four things separate and never treat one as proof of another: a backup is configured, a backup job succeeded, a restore was tested, and business recovery was demonstrated.
Request a quote- Price
- Quoted on scope
- How you can engage us
- One-off project · Ongoing service · Project, then ongoing
- Delivered by
- Cyber Guys
- Review cadence
- Restore tests on the schedule agreed in the scope when continued as an ongoing service
Who it is for
Businesses that rely on a few critical systems and want evidence, not assumptions, that they could recover them.
Scope
The critical systems and data agreed in the scope, the backups that protect them, and the people responsible for recovering them.
What is included
- Identifying critical systems and the data they depend on
- Backup coverage review for each critical system
- Retention and isolation review, including immutable or offline copies
- Recovery ownership: who restores what, and who decides
- Agreed recovery objectives: how much data you can lose and how long you can be without each system
- Restore test coordination with your IT provider or backup provider
- Recorded restore evidence, including what was restored, by whom, how long it took and whether it worked
- Dependencies between systems that affect recovery order
- Recovery exercises that walk through bringing the business back
- Follow-up actions tracked to completion
What is not included
- Work outside the agreed scope, which is quoted separately
- Supplying backup software, storage or services
- Recovering data after an incident (incident response is a separate service)
- Rebuilding systems or infrastructure
- Any assurance that recovery will succeed in a real incident
How delivery works
- 01
Map what matters
We identify critical systems, their data, dependencies and owners, and how each is backed up today.
- 02
Agree objectives
We agree recovery objectives for each critical system with the business and note where current backups fall short.
- 03
Test restores
We coordinate restore tests with whoever runs the backups, restoring to a safe location so production is not affected.
- 04
Exercise recovery
We run a recovery exercise to see whether the business could actually operate again, and record the result.
- 05
Follow up
Optional: an ongoing service repeats restore tests on a schedule and tracks follow-up actions.
Who does what
You
- Name owners for each critical system
- Agree recovery objectives for each critical system
- Make the people who run the backups available for restore tests
- Approve each restore test before it runs
Cyber Guys
- Review coverage, retention and isolation
- Coordinate restore tests and record the evidence
- Run recovery exercises and report the result
- Report each of the four states separately for each system
- Track follow-up actions
Your IT provider or partner
- Your IT provider or backup provider performs restores on systems they manage and confirms the result
Access we need
- Read access to backup consoles and job reports
- A safe, isolated location for test restores, agreed with whoever runs the backups
We never ask for your password. Access is through a named account that you or your IT provider create for the engagement, and can remove at any time.
Dependencies and licences
- Restore tests depend on the backup product and the cooperation of whoever runs it
- Some isolation or immutability options depend on your backup product and licence
What you receive
- Critical systems and dependency register
- Backup coverage, retention and isolation findings
- Agreed recovery objectives
- Restore test records
- Recovery exercise report
- Follow-up action list
How we know it is finished
- Each critical system has its backup configuration, latest job result, restore test result and recovery exercise result recorded separately
- Gaps against agreed recovery objectives are recorded with owners
- The recovery exercise report is delivered
Related services
Incident preparedness
Know who does what before something goes wrong.
Quoted on scopeRequest a quoteEssential Eight uplift
Know your Essential Eight maturity, and lift it to the level you choose.
Quoted on scopeRequest a quoteCyber insurance readiness
Answer your insurance questionnaire accurately, with evidence behind it.
Quoted on scopeRequest a quote
Request a quote for Backup and recovery readiness
Tell us a little about your business. We will arrange a short scoping call to agree what is in scope and send a written quote. The call is about scope and price — it is not free security advice.