Backups are only the beginning ============================== Define the recovery goal Recovery point objective describes the amount of data loss a business can tolerate. Recovery time objective describes how long it can wait for service restoration. Set both before choosing a backup schedule. Keep independent copies A backup stored beside the original can be affected by the same incident. Plan isolated copies and consider access controls, immutability and separate locations where appropriate. Test the entire restore A successful backup job is not proof that a business application can be recovered. Restore data into an isolated environment, verify the application and record the time required. Write down the sequence Recovery depends on people and dependencies. Document where backups are located, who can access them, and the order in which identity, database and application services should return. Hostingard planning brief. Confirm the selected configuration, current availability, pricing and service scope in a written quotation.