Backup & Recovery Tests

This is the help text the console shows in the help panel on this page.

ISO 27001 A.8.13 requires that backups are tested periodically to verify that data can be restored. This page manages scheduling, running and documenting those tests (an annual live test is the usual target).

Test Cards

Each card shows:

  • Test date (“Backup Test — date”) and a status: Scheduled, In Progress or Completed
  • Scenario and participant count: how many scenarios the test has and how many participants have signed
  • Result: Pending until you set an overall result, then Pass, Partial or Fail
  • A coloured bar per scenario showing its outcome, an Evidence tag once evidence is stored, and Download Report once the report is ready

Scheduling a Test

Click Schedule Test, pick the test date and optionally add participants (name, email and a role of Lead, Observer or Approver). Each new test comes with five default scenarios: recovery of a single server instance, recovery of a critical database, restoration of data from a storage bucket, recovery of a disk volume, and recovery from an availability zone failure.

Running a Test

Click a test to open the Live Session view, where you work through each scenario step by step, record the results and collect sign-offs.

Reports

When the result is set and everyone has signed, AutoCISO generates a PDF report. Download Report saves it, and the test is stored as evidence for A.8.13 in the Evidence Vault.

Only Owners and Managers can schedule and run tests.

Fields

Test Date

The scheduled date for the backup restoration test. ISO 27001 typically requires at least annual testing; critical systems may require more frequent tests.

Participants

The people who take part in the test. Participants are optional when scheduling and can be added later.

  • Name: Participant’s full name (appears on the report)
  • Email: Participant’s email address
  • Role: Lead, Observer or Approver
Last reviewed: 2026-10-08

Was this page helpful?

Esc