Most midsize companies have "a backup" — but nobody has tested a full restore in the past 12 months. That is not enough when it matters.
This checklist walks through every lever that has made a difference in audits and after real incidents: RPO/RTO per workload, immutability, off-site copies, restore-test cadence, permissions.
What is inside
- RPO and RTO definitions per workload class
- 3-2-1-1-0 rule and realistic implementation
- Immutability and air-gap — what really counts
- Restore test plan with cadence and ownership
- Ransomware hardening: 12 concrete measures
- Retention periods (statutory and tax)
Related service
Backup & Disaster Recovery
Automated backup and fast recovery when it counts – from German data centers, focused on business continuity.
View service