Observe and back up
Back up and restore
Protect data and configuration with separate, encrypted, versioned backups and prove recovery on a clean system.
8 minute lesson
A backup job is only a promise. A restore test is evidence.
Back up application data, required configuration, and recovery instructions without blindly copying live secrets. Keep copies separate from the server and protect deletion. Restore into a clean environment, verify integrity, and record recovery time and missing steps.
A backup stored under the production root credential can be deleted during the same compromise. Independent access and version retention improve survival, but require a separate recovery procedure.
Verify application meaning after restoration, not only file presence. Row counts, checksums, a login, and one representative read provide stronger evidence that the recovered system is usable.
Restore application data and required configuration onto a clean host and record checksums, missing steps, and recovery time. Delete or corrupt one source file, then prove an older protected version restores correctly.
Lesson completed