What is a Backup & Disaster Recovery Assessment?
A Backup & Disaster Recovery Assessment checks that your backups include what the business cannot do without, are protected from an attacker, and can be restored in a time the business can live with.
A green checkmark on a backup job tells you the job ran. It does not tell you the right data was included, that the copy is safe from an attacker or that it can be restored in time.
The common failures are quiet. A new server was never added to the schedule. The backups sit on the same network an attacker would reach. Cloud data is assumed to be protected by the vendor and often is not, at least not the way you expect.
This assessment tests the setup against what the business actually needs. We start from the systems you cannot do without, and work back to whether they can be brought back, how fast and what stands in the way.
Who needs it?
- A business that has backups and has never tested them
- A company that moved to the cloud and assumed the vendor handles backup
- A team whose last restore took longer than expected
- An owner who cannot say how long the business could be down
What problems does it address?
- Backup jobs that succeed, with no proof the right data is included
- A new server that was never added to the schedule
- Backups on the same network an attacker would reach
- Cloud data assumed to be protected by the vendor
What we assess
- Which systems and data are backed up, and which are not
- Backup isolation from the production network and from administrator accounts
- Retention periods
- Monitoring, and whether anyone sees a failed job
- Restore testing, and the last time it was done
- Dependencies, such as the systems needed before a restore can start
- Recovery time and recovery point objectives, and whether the setup can meet them
- Your critical business systems, identified with you
What you receive
- A map of what is and is not protected
- A comparison of your recovery targets against what the setup can deliver
- Weak points ranked by impact
- A restore test plan
- Recommended changes, in order
What happens afterward?
You decide what to do with the findings, and with whom. Your team or IT provider can carry them out, with Avertix guiding the changes and retesting them if you want, or you can keep senior help on hand through an advisory arrangement. Many clients stop after the report.
How the engagement works
Free consultation
A 45-minute call with a senior consultant about your situation. It is a conversation, not an assessment. You leave with a recommended next step.
Scope and price
Scope, deliverables and price are agreed in writing before any work starts.
Assessment
The consultant who scoped the work does it. Requests to your team stay small, and we work with your IT provider where you have one.
Findings and walkthrough
You get a written report and a walkthrough. Findings are ranked, so you know what to do first and what can wait.
