SESK: Stuff Everyone Should Know · sesk.info/sec-test-backups
What should you do regularly with your backups, according to CISA?
Test that they work in a recovery scenario.
- Delete the oldest copy
- Test their availability and integrity ✔
- Rename the files
Why: A backup you have never restored may be empty, corrupted or missing key files. A regular test shows it works before a real emergency.
Huh, didn't know that: NCSC says it's important you know how to restore a backup and check that it contains all your important data.
Why did the computer show up at work late? It had a hard drive.
Like this card?
References
Answer: Test their availability and integrity. A backup you have never restored may be empty, corrupted or missing key files. A regular test shows it works before a real emergency.
- CISA: #StopRansomware Guide www.cisa.gov/stopransomware/ransomware-guide
regularly test the availability and integrity of backups in a disaster recovery scenario
Checked 2026-10-10. - NCSC: Backing up your data www.ncsc.gov.uk/collection/small-organisations-guide-to-cyber-security/backing-up-your-data
it's important you know how to restore it
Checked 2026-10-10.
Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.
More stuff everyone should know
That's stuff everyone should know.