Checks · DB-007

DB-007 · Backups never restore-tested

Why it matters

A backup that has never been restored may be empty, incomplete, or too slow to help.

How we detect it

No passed restore drill in the last 30 days.

How we fix it

Run a restore drill into a throwaway database and record how old the backup was and how long it took.

Can it be fixed automatically? Yes, with a template change

Related checks

• DB-006 · No backups or point-in-time recovery
• TLS-001 · Certificate expires in under 14 days
• TLS-002 · TLS below 1.2 accepted
• TLS-003 · HTTP not redirected to HTTPS