Give your first backup test a specific finish line: recover a small sample into a separate folder, open the recovered files, and confirm they contain the versions you expected. Keep the working originals in place.
NIST's Small Business Quick-Start Guide recommends regular backups and backup testing. It also advises assessing backup integrity, meaning whether the saved data is intact, before using it for restoration. https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=957322
The drill below is WITTCO's recommended starting procedure for ordinary office documents during normal operations. Use it to check whether the responsible person can retrieve a defined sample and verify its contents. If you suspect an active security incident, pause this exercise and involve whoever handles incident response.
Define the sample and the pass criteria
We recommend choosing a document, spreadsheet and PDF that already belong in your backup. Start with nonsensitive material you are authorized to access. If you create practice files instead, let them complete the normal backup process before attempting recovery.
Write down each file's original location, desired version and a recognizable detail. For a spreadsheet, choose a worksheet name and a known total. For a document, identify a particular paragraph. For a PDF, specify a page and its contents.
For this exercise, count a file as passing only when it arrives in the test destination, opens successfully and contains the expected information. Also check that its working original remains unchanged. Mark missing or incorrect files individually.
NIST recommends identifying who inside and outside the business has recovery responsibilities. WITTCO suggests naming a test operator and someone familiar enough with the documents to review their contents. https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=957322
Prepare a destination before restoring
Our recommendation is an empty folder named Restore Test followed by the date, on an approved office computer. Choose a location outside shared working folders and automatic file synchronization. Limit access to the people conducting the test.
Keep the originals. Do not delete them to simulate a loss. Leave backup settings alone, including retention, which means how long saved versions remain available.
Microsoft warns that an in-place File History restore replaces the current version and cannot be undone. Its Restore to option allows a different destination. https://support.microsoft.com/en-us/windows/experience/backup-recovery/backup-and-restore-with-file-history
Before proceeding, write down the full test destination. Stop if the restore screen does not clearly show where the recovered content will go. Use only the product procedure relevant to your existing backup.
Microsoft File History procedure
Microsoft says File History stores covered files on an external drive or network location. Its documented recovery path uses the original folder's previous versions. https://support.microsoft.com/en-us/windows/experience/backup-recovery/backup-and-restore-with-file-history
Follow this Microsoft workflow, using the separate destination prepared above:
- Make the existing backup destination available, then locate the sample's original containing folder in File Explorer.
- Right-click the folder and select Restore previous versions.
- Select the folder version for your intended recovery date.
- Expand Open and choose Open in File History to preview it.
- Check the scope before continuing; for this first drill, choose a small folder containing your sample.
- Expand Restore, choose Restore to, and select the empty test destination.
Microsoft documents these controls here: https://support.microsoft.com/en-us/windows/experience/backup-recovery/backup-and-restore-with-file-history
WITTCO recommends stopping if the selected folder contains substantially more material than you intended to test. Record an absent version as a gap to investigate rather than changing backup settings mid-exercise.
Backblaze Computer Backup procedure
Backblaze's client guide documents computer, recovery time and destination selection. It says the restore needs slightly more free space than its size. Check available space before starting. https://www.backblaze.com/computer-backup/docs/create-a-restore-client
Follow Backblaze's documented workflow, choosing Custom Folder for this drill:
- Open the Backblaze application, select Restore Options, then Restore App, and complete account sign-in.
- Select the computer containing the backed-up sample.
- Use Change on Mac or Set on Windows to choose the recovery date and time.
- Change the destination, select Custom Folder, and choose your empty test folder.
- Select the sample files and folders, click Restore, and wait for completion.
Backblaze documents these controls here: https://www.backblaze.com/computer-backup/docs/create-a-restore-client
For this exercise, WITTCO recommends stopping if your screen differs enough that the destination is uncertain. Ask the backup administrator to confirm the appropriate procedure for your installed version before proceeding.
Open the recovered copies and record the result
Our recommended review starts inside the test destination. Open each recovered file from there. Keep normal security protections enabled, and do not enable macros or other active content for this drill.
Use this checklist:
- Confirm every selected file arrived in the test destination.
- Open each recovered copy in its usual application.
- Check the paragraph, worksheet, total or PDF page you identified beforehand.
- Confirm the contents match the intended version.
- Check that the working originals remain unchanged.
- Record the selected recovery date, elapsed time, errors and help required.
Describe the result narrowly: these files passed these checks on this date. Do not use a sample pass to declare every office file recoverable. WITTCO recommends separate exercises for accounting databases, complete computer recovery and other systems outside this drill.
A hypothetical estimating office
Imagine a six-person estimating office testing a proposal template, sample pricing spreadsheet and equipment PDF. This is a hypothetical example.
The office manager selects last week's versions and restores them into a dated test folder. The estimator reviews a specified paragraph, worksheet and PDF page. Suppose the spreadsheet opens but lacks the expected worksheet. Record that file as failing the content check. Assign someone to investigate the recovery date and backup coverage, then repeat the test after correction.
Your next actions
WITTCO recommends a monthly reminder as a starting schedule, adjusted to your business needs, plus another test after meaningful backup or folder changes. This schedule is our recommendation, not a vendor requirement.
- Name the operator and content reviewer.
- Choose the sample, expected versions and separate destination.
- Run the restore and record each file's result.
- Assign corrections and retest any failures.
- Remove temporary recovered copies under your office's data handling rules after review, leaving working files and backups intact.
Sources
- NIST, NIST Cybersecurity Framework 2.0: Small Business Quick-Start Guide: https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=957322
- Microsoft, Backup and restore with File History: https://support.microsoft.com/en-us/windows/experience/backup-recovery/backup-and-restore-with-file-history
- Backblaze, Create a Restore (Client): https://www.backblaze.com/computer-backup/docs/create-a-restore-client
