Your backup is not real until you restore something from it.
That sounds obvious, but most small businesses discover their backup failed only during a ransomware attack or a dead server — when it's too late. Cyber insurers increasingly ask for proof that backups work, not just that they exist.
This guide walks you through a 15-minute backup test you can run this week, even if you're not an IT professional.
Why backup tests matter for small business
According to the FTC's small business cybersecurity guidance, protecting your network includes making sure you can recover data after an incident. The NIST Cybersecurity Framework 2.0 lists Recover as a core function — and recovery starts with verified backups.
Common failures we see in 5–50 employee businesses:
- Backups run but files are corrupted
- Cloud sync mistaken for backup (OneDrive/Google Drive is not a full backup strategy)
- External drives connected so rarely they haven't run in months
- No one knows who is responsible for checking backups
Before you start (2 minutes)
Gather this information:
- Where is your data backed up? (Microsoft 365, Google Workspace, external drive, NAS, backup service like Acronis/Backblaze)
- Who set it up? (Internal staff, MSP, or "we're not sure")
- When did it last run successfully? (Check the backup dashboard or ask your IT provider)
If you can't answer question 1, stop and schedule 30 minutes with whoever manages your IT. This test can't proceed without knowing where backups live.
The 15-minute backup test
Step 1: Pick one critical file (2 min)
Choose a file your business cannot operate without for 24 hours:
- A current client spreadsheet
- This week's payroll file
- Your primary QuickBooks backup
- A shared document the whole office uses daily
Do not use a test file. Use something real. The goal is to prove you can recover what matters.
Step 2: Restore it to a different location (8 min)
Restore the file from yesterday's backup to a new folder — never overwrite the original.
Microsoft 365 / OneDrive:
- Go to admin.microsoft.com or the user's OneDrive
- Select the file → Version history → Restore a version from 24+ hours ago
- Save restored copy to
Backup-Test-June-2026/folder
Google Workspace:
- Open Google Admin or the user's Drive
- Find file → Manage versions → Download previous version
- Save to a test folder
External drive / NAS / backup software:
- Open your backup console (Synology, Acronis, Backblaze, etc.)
- Browse backup from yesterday
- Restore single file to
Backup-Test-June-2026/
Step 3: Open and verify the file (3 min)
- Does it open without errors?
- Is the content current (within 24 hours of what you expect)?
- Can multiple people open it if needed?
If any answer is no, your backup has a gap. Document what failed.
Step 4: Document the result (2 min)
Create a simple log entry:
Backup Test — [Date]
File tested: [filename]
Backup source: [OneDrive / NAS / Acronis / etc.]
Restore successful: YES / NO
Time to restore: [X minutes]
Tested by: [name]
Next test date: [30 days from today]
Save this log in a shared folder your team can access. Cyber insurance auditors love seeing dated test records.
What to do if the test fails
| Problem | Likely cause | Fix |
|---|---|---|
| No backup found from yesterday | Backup job not running | Check schedule; contact IT/MSP |
| File won't open after restore | Corrupted backup | Test older version; investigate storage |
| Wrong file version restored | Retention too short | Increase retention policy |
| Don't know where backups are | No backup strategy | Priority 1 — implement 3-2-1 backup this week |
The 3-2-1 rule (quick reference)
- 3 copies of your data
- 2 different storage types (cloud + local, for example)
- 1 copy offsite (cloud counts)
OneDrive alone is not three copies. It's one copy in one cloud.
Schedule your next test
Put a recurring calendar reminder: same day every month. Backup tests are boring. That's the point — you want boring, predictable success.
Watch the video walkthrough
Follow along on the Secure SMB Tech YouTube channel for a screen-recorded walkthrough of this entire checklist.
Houston business owner? Need help implementing backup testing for your team? Houston Secure IT offers a free consultation for Houston-area businesses with 5–50 employees.
Affiliate disclosure: Some links may be affiliate links. We only recommend tools we would use with real SMB clients.