Backup Restore Test Log Worksheet for ERP and Plant Systems
A backup that has never been restored is a hope, not a control. This worksheet records each restore test, calculates throughput and the gap to your recovery time objective, and highlights systems that fail the target or the application check.
| System | Backup type | Test date | Data restored (GB) | Restore time (min) | Target RTO (min) | Throughput (MB/s) | Minutes over target | App validated | Tester | |
|---|---|---|---|---|---|---|---|---|---|---|
69.0794 | 0 | |||||||||
45.5111 | 0 | |||||||||
34.1333 | 30 | |||||||||
29.2571 | 0 | |||||||||
19.2 | 20 |
Any row with minutes over target above zero or App validated not Yes needs a follow-up action. Test restores to an isolated network, never over production.
Get your restore tests reviewed
Optional review of restore results against realistic recovery time for ERP and MES.
Optional. The tool and every export work without this. No spam.
How to use the log
Add one row per test. Enter the data volume restored, the elapsed restore time and the target RTO for that system. Throughput and minutes over target compute automatically. Mark whether the application was validated, meaning users or an admin confirmed that the ERP, MES or file share actually works after the restore, not just that files copied back.
- Test each critical system at least annually
- Include the offline or immutable copy
- Time the whole process, including login and validation
- Export to Excel for audit evidence
Reading the results
Throughput shows whether your target is realistic. If a 850 GB database restores at 60 MB/s, expect nearly four hours before validation. Rows over target mean either the RTO is optimistic or the restore path needs work: faster storage, parallel streams, a closer copy. A partial validation often means a dependency such as licensing, certificates or integrations was missed.
What to test beyond the database
Identity services and DNS often have to return first. Test the restore of a domain controller, the ERP application tier with its configuration, integration middleware and the engineering file share holding CNC programs. Ransomware recovery usually fails on a forgotten dependency, not on the main database.
Common mistakes
Restoring only a few files, testing the easiest system, using production network, not timing validation, and never testing the immutable or offline tier that you would rely on in an attack.
Frequently Asked Questions
How often should restores be tested?
Critical systems at least annually and after major changes such as upgrades or a new backup platform. Many teams rotate monthly spot restores of files and run a full-system test twice a year.
What is RTO versus RPO?
RTO is how long a system can be down before the business is harmed. RPO is how much data loss in time you can accept. This log tracks RTO. Record RPO separately from backup frequency.
Should we test the immutable copy?
Yes. It is the copy you will use in a ransomware event, so prove it restores and meets the RTO, and that credentials to reach it are stored outside the domain you may lose.
What counts as validated?
A named person confirmed that the application starts, a sample of records is correct, key integrations connect and a normal transaction can be posted. File counts alone are not validation.
If you want restore tests of ERP databases scripted and logged automatically, we can talk through options. The worksheet is complete on its own.
Related Tools
Ransomware Recovery Time Objective Calculator
Estimate realistic hours to restore a plant after ransomware from data volume, restore speed, server rebuilds and validation.
Industry TemplatesRansomware Tabletop Exercise Scenario Template
Fill in your plant, ERP and OT details and get a facilitator-ready ransomware tabletop scenario with injects, discussion questions and an after-action section.
Compliance & ContractsCyber Risk Register Worksheet for Manufacturers
Score IT and OT cyber risks by likelihood and impact, compare inherent and residual risk and track the treatment owner.
Compliance & ContractsUser Access Review Worksheet for ERP and OT Accounts
List accounts by system and role, flag stale or shared ones and record the keep, change or remove decision.