---
title: "Managed backup: the 30-minute restore test that proves it"
description: "Managed backup with proof: a 30-minute restore test, the 3-2-1-1-0 rule and a testing calendar for the board. No-obligation proposal from DataRoad."
language: en
url: https://www.dataroad-it.com/en/managed-backup-30-minute-restore-test/
source: https://www.dataroad-it.com/en/managed-backup-30-minute-restore-test/
publisher: DataRoad IT (DataRoad - IT Services and Consulting), Portugal
---

> Managed backup with proof: a 30-minute restore test, the 3-2-1-1-0 rule and a testing calendar for the board. No-obligation proposal from DataRoad.

# Managed backup: the 30-minute restore test that proves it

At a glance For decision-makers short on time.

- 01 Only a timed restore proves that a backup works.
- 02 30-minute test: an old document, a deleted email and a server booted in isolation.
- 03 The 3-2-1-1-0 rule with an off-site copy and an immutable copy against ransomware.
- 04 Monthly, quarterly and annual tests, always with a written report.

### In this article

**A backup that has never been restored does not protect the company: it simply postpones discovering the problem until the worst possible day.** The proof of a managed backup is a timed restore, carried out on data chosen by the board.

In a well-managed service this is routine: a quick test every month, a server restored every quarter, a full drill once a year, always with a report. Here, DataRoad - IT Services and Consulting proposes a half-hour script that any manager can demand from their IT partner, without knowing anything technical.

## In four points

- **A completed backup is not a recoverable backup** The automatic notification says the backup ran; it does not say whether it opens, or how long it takes to get operations back.
- **Half an hour is enough** An old document you choose, a deleted message and, if there is a server, booting an isolated copy.
- **3-2-1-1-0** Three copies, two media, one off-site, one that cannot be deleted, zero errors in the latest test.
- **Rhythm** Monthly, quarterly and annual tests, depending on depth.

## Why do backups that show green fail?

- **Gaps in scope** The billing system, a folder created last month or a partner's email were never in the plan.
- **The copy is damaged** Incomplete or corrupted, without anyone ever having opened it.
- **The attacker got there first** Spent days inside the network and destroyed or encrypted the backups before launching the attack.
- **The know-how walked out the door** Credentials, licences and restore steps were in a former employee's head.
- **Recovery takes too long** The data is on a disk kept elsewhere or in a low-bandwidth cloud, and getting back to work takes days.

Leading authorities point the same way. CISA, in the United States, recommends in its ransomware guide encrypted, offline copies of critical data, with periodic integrity and availability tests. The UK's NCSC has set out specific principles for backups that resist ransomware.

## How is the 30-minute restore test carried out?

Book half an hour with your provider, in person or by video call with screen sharing. The golden rule: the board chooses what gets restored.

- **Minutes 0 to 5: what is covered**: ask for the list of what is protected (servers, PCs, Microsoft 365, databases, management software) and, more importantly, the list of what is not.
- **Minutes 5 to 12: a three-month-old document**: an invoice or contract from that time, recovered to a separate location. Confirm it opens.
- **Minutes 12 to 18: a deleted message**: in a mailbox you choose. In Microsoft 365, this is where you find out whether there is a dedicated backup solution or only Microsoft's native retention, a topic we explain in [Microsoft 365 backup: what most companies are missing](https://www.dataroad-it.com/en/managed-microsoft-365-backup-recovery-windows/).
- **Minutes 18 to 26: a server booting**: a copy started in an isolated environment, without touching production. Watch it boot, open the main application and note how long it took.
- **Minutes 26 to 30: the vault**: see where the off-site copy is held, confirm immutability and the number of retention days. Keep the report.

If one of the steps does not fit in the half hour, you have already learned something. It is no cause for alarm; it is a fix to be made, with a set date.

### What the report must record

- **Author and date** Day, time and responsible engineer.
- **Items and times** Each element recovered, with its duration.
- **Problems** Errors detected and the deadline for fixing them.
- **Off-site protection** Proof that an external copy and an immutable copy exist.

## What should you ask about each digit of 3-2-1-1-0?

| Rule | What it means | What to ask |
| --- | --- | --- |
| **3** | Original plus two copies | "Where are the two copies besides the original data?" |
| **2** | Two different media, such as local disk and cloud | "The backup machine has failed. Where does the second copy come from now?" |
| **1** | One copy in another location | "If the office burns down, where do I restore from?" |
| **1** | One copy locked against deletion or alteration for a set period | "With stolen administrator credentials, can someone destroy it?" |
| **0** | Zero errors in the latest test | "When was the last test? Show me the report." |

**What an immutable copy is:** think of a safe with a time lock. The copy goes in and, until the period ends, nobody can delete or modify it, whether the provider, an administrator or someone with stolen credentials. It is the last line of defence against ransomware.

## How often should you test?

| Type of test | Minimum frequency | Who is present |
| --- | --- | --- |
| Randomly chosen files and emails | Every month | IT partner |
| Server or virtual machine started in isolation | Every quarter | IT partner; report sent to the board |
| Full 30-minute drill | Once a year | Board and IT partner |
| Unscheduled test | After significant changes: new server, migration, new application | IT partner |

These tests also validate the two limits the business must know: how long it can be down and how much work it can lose. How to set those values is explained in [a disaster recovery plan for an SME](https://www.dataroad-it.com/en/managed-business-continuity-rto-rpo/).

## Proof in the field, in France

In the [IT audit and consultancy for the France Affiches group](https://www.dataroad-it.com/en/france-affiches-it-audit-paris/), a large-format printer based in Antony, near Paris, DataRoad carried out an on-site inventory of network and systems. It assessed servers and virtualisation, privileged accounts and former employees' accounts, workstation protection and backups. The criterion was unambiguous: verify that backups restore, not just that they run.

The board received a written, prioritised diagnosis: risks to fix now, technical debt to schedule and what works and needs no investment. In essence, the half-hour drill applied to the entire infrastructure.

## Frequently asked questions

### Are daily backups enough to keep us protected?

Not necessarily. A daily backup proves there is a copy; only a tested, documented restore confirms data integrity and shows how long it takes to come back.

### Does testing a restore put production data at risk?

No, if the test is properly run. Files are recovered to a separate location and servers start isolated from production, which is never touched.

### How quickly should a server come back?

Within a measured time that is acceptable to the business; it varies with the amount of data and where the copy is stored. If the test reveals a full day and the company can only tolerate two hours, the board has a decision to make.

### Immutable backup: what does it mean?

It means that, once written, the copy is locked against deletion and alteration for a fixed period, for everyone. Against ransomware that attacks backups first, there is no more effective defence.

## How does DataRoad's managed backup work?

With [DataRoad managed backup](https://www.dataroad-it.com/en/managed-backup-services-portugal/) the proof restore is standard procedure. We monitor every failed backup, keep an off-site, immutable replica and document every test. In a serious incident, whoever handles [business data recovery](https://www.dataroad-it.com/en/business-data-recovery-servers-raid-nas/) already knows every copy and where it is; and the guide to the [first hours after losing data](https://www.dataroad-it.com/en/data-loss-first-hour-response-protocol/) tells you what to do until then.

With the [IT Unlimited Premium plan](https://www.dataroad-it.com/en/it-unlimited-premium-on-site-support/) on-site support is unlimited: if an engineer is needed at the office to recover, the visit is included.

## Want to see your restore working?

In 5 working days we run the 30-minute drill with you, assess your infrastructure against 3-2-1-1-0 and leave you, in writing, the measured recovery times and fixes in order of priority. Request a no-commitment proposal.

**More than 10 workstations · support contract · remote, on-site and phone support.** Call +351 211 459 950 * or write to sales@dataroad.pt.

**Call to a Portuguese landline.*

## Sources

- [CISA: #StopRansomware Guide](https://www.cisa.gov/stopransomware/ransomware-guide)
- [NCSC (United Kingdom): Ransomware-resistant backups](https://www.ncsc.gov.uk/collection/ransomware-resistant-backups)

Chosen by respected and international companies

★★★★★ 5,0 · 52 Google reviews

★★★★★ 5,0 · 52 Google reviews

DataRoad

## Related articles

[Managed IT and cybersecurityTeams on the move: securing laptops, phones and public Wi-FiThe real travel risk is an unencrypted lost laptop, not hotel Wi-Fi. With disk encryption, central management, MFA and a controlled connecti…12 October 2026 · 7 min read](https://www.dataroad-it.com/en/managed-cybersecurity-travelling-teams/)[Managed IT and cybersecurityExternal attack surface: what the internet sees of your companyAutomated attacks hunt for vulnerable versions, and company size is irrelevant. In 2025, CERT.PT recorded 3,864 incidents, 40% more than in …12 October 2026 · 5 min read](https://www.dataroad-it.com/en/external-attack-surface-managed-cybersecurity/)[Managed IT and cybersecurityNOC and managed cybersecurity: who watches your SME, and whenThe question is not whether you have a SOC: it is who receives the alert at 10 pm on a Saturday and what they do next. At DataRoad, nights, …12 October 2026 · 6 min read](https://www.dataroad-it.com/en/noc-managed-cybersecurity-sme/)[Managed IT and cybersecurityMicrosoft 365 security: the 10 controls that are yoursIn Microsoft 365, the platform is Microsoft's and the keys are yours. According to Microsoft, MFA and blocking legacy authentication stop mo…12 October 2026 · 6 min read](https://www.dataroad-it.com/en/microsoft-365-managed-cybersecurity-shared-responsibility/)[Managed IT and cybersecurityGDPR and managed cybersecurity: 10 technical controls to proveWithout documented technical measures, a data breach turns from an IT incident into a problem with the regulator. Ten controls in three bloc…12 October 2026 · 6 min read](https://www.dataroad-it.com/en/gdpr-managed-cybersecurity-10-technical-measures/)[Managed IT and cybersecurityExposed passwords: audit your domain and close the door in 5 daysThe risk is not the email appearing in a breach: it is the same password opening a work account. Change what is exposed, MFA on every accoun…12 October 2026 · 5 min read](https://www.dataroad-it.com/en/company-credentials-data-breach-check/)[Managed IT and cybersecurityAsset inventory: the basis of IT estate management and NIS2Without an asset inventory there is no planned renewal, no demonstrable security and no answer to CNCS. NIS2 entities must submit the list o…12 October 2026 · 7 min read](https://www.dataroad-it.com/en/it-asset-inventory-management-nis2/)[Managed IT and cybersecurityBreak-glass accounts in Microsoft 365: your company's insuranceA locked-out admin can leave email, Teams and files unmanaged for days. Break-glass accounts are the reserve administrator you only use when…12 October 2026 · 5 min read](https://www.dataroad-it.com/en/microsoft-365-break-glass-accounts/)[Managed IT and cybersecurityWindows 365 for business: when a cloud PC cuts costsA cloud PC pays off for consultants, seasonal staff, teams without an office and mixed Mac and Windows estates. For video, CAD or weak inter…12 October 2026 · 6 min read](https://www.dataroad-it.com/en/windows-365-business-cloud-pc-costs/)

Numbers you can verify

**11** years in business

**232** clients

**< 10 min** average response time

**15+** IT vendor certifications

**10+** Countries with clients supported

**5.0 ★** 52 Google reviews

Transparency

## What many providers hide, we publish.

[See plans and prices →](https://www.dataroad-it.com/it-unlimited/)

- **Prices upfront** Essential from €395/month + VAT, Premium from €750 and Premium 365 from €1,200.
- **No lock-in** Annual contract, no lock-in and no joining fees.
- **Everything in writing** What is included, the scope and the price, before you sign.
- **Support without counted hours** Remote and phone in every plan; on-site support from Premium.

Partners and certifications

DataRoad · Managed cybersecurity

## One StepAhead of IT.

Nobody notices security until the day it fails. That is why ours works every day: alerts handled, access reviewed, backups verified.

- **11** years in business, since 2015
- **0** DataRoad security incidents in 11 years
- **Top 5%** SMEs · scoring.pt

We do **IT** right.

DataRoad IT Unlimited

## Does your IT depend on a single person?

Documentation, inventory and one contact who answers for everything.

[Request a proposal, no commitment →](https://www.dataroad-it.com/en/#contact)+351 211 459 950 **Call to a Portuguese landline · More than 10 workstations · support contract · remote, on-site and phone support[Not sure what you need? Talk to the assistant →](https://www.dataroad-it.com/en/#assistente)

---
Versão HTML desta página: https://www.dataroad-it.com/en/managed-backup-30-minute-restore-test/