Green ticks don’t restore data: why backup success isn’t recoverability

Every morning, someone in your organisation opens a backup report full of green ticks. It feels reassuring. It shouldn’t — at least not on its own.

A successful backup job proves one thing: data was copied from somewhere to somewhere else without an error the software noticed. It doesn’t prove the copy is complete, that it can be read back, that the application will start from it, or that you can do any of that fast enough to matter.

What green ticks miss

• Silent exclusions. New servers, databases and SaaS tenants that were never added to a policy don’t fail — they simply aren’t there.
• Application consistency. A crash-consistent copy of a busy database may not start cleanly. You only find out when you try.
• Dependencies. Restoring an application server is pointless without the identity, DNS and database services it relies on — in the right order.
• Time. Recovering hundreds of terabytes from deduplicated or cloud storage can take far longer than your recovery time objective allows.
• Tampering. If attackers had access, the latest backups may contain their tools, or may have been quietly deleted.

What actually proves recoverability

Recoverability is proven by restores, not backups. That means regularly restoring complete critical applications — not a handful of files — into an isolated environment, timing the whole process end to end, and checking that the application works and the data is clean.

It also means involving your backup vendor. Vendors can validate that your configuration, versions and storage will support the recovery you are counting on, and often spot issues internal teams have normalised.

A simple starting point

1. Pick your most critical application.
2. Restore it, fully, into an isolated network.
3. Time every step, including finding the right person and the right backup.
4. Compare the result with the recovery time your business has been promised.

The gap between those two numbers is the most honest measure of your backup environment you will ever get.