Start with the work you need to resume
A restoration company can have trucks, crews and drying equipment ready while its office cannot open the records needed to send them out. A backup notification does not answer the operational question: Can someone recover a usable job file? A small, controlled restoration drill turns that question into something the owner can observe before a real interruption forces the issue.
Choose a representative completed project and work with your technology provider. The test should use an approved separate location, protect customer information and leave production records unchanged. Try reopening the estimate, authorization, inspection photos and final invoice together. This is an operational exercise, not permission to experiment with security controls or disconnect systems supporting active jobs.
Inventory the records, then test access
The Federal Trade Commission recommends identifying essential business information and where it lives, including paper records and data on individual devices. For a restoration office, that suggests a useful inventory: Which project documents are inside the job application, which remain on a phone and which exist only in email? Record the owner of each collection.
Ask your provider to demonstrate recovery rather than simply display a backup status. Can the authorized substitute open the files? Are photographs associated with the right project? Is the recovered estimate the version the team expects? Write down missing items and access problems. A successful transfer of files is not the same as a usable working record.
Protect the copy and define the clock
CISA’s ransomware guidance recommends offline, encrypted backups and regular tests of their availability and integrity. Copies that an attacker can reach may also be deleted or encrypted. Have the provider explain the protections in plain language, including who can alter backups and how recovery would proceed if the normal office accounts were unavailable.
Measure how long the approved drill takes from request to usable information. Then compare that interval with your actual workflow. Could dispatch wait that long? Could payroll? Decide which records must return first and who can authorize recovery. Do not mistake a target written into a plan for a recovery time your team has demonstrated.
Make the drill part of continuity planning
The IRS recommends keeping duplicate electronic records in a separate safe location and reviewing emergency plans as the business changes. Include financial records in that discussion, alongside project documentation. A new software platform, employee departure or change in bookkeeping arrangements is a reason to revisit responsibilities rather than assume last year’s plan still fits.
Finish with a short action list: a named owner, a correction deadline and another test date. Keep emergency provider contacts available through an approved channel that does not depend on the affected system. Pair this exercise with NDR’s guide to backup suppliers so physical resources and essential records are considered in the same continuity conversation. For the next management meeting, bring one example of a recovered file and one unresolved problem. Ask the person who would use the record to review it. Their response can expose gaps a technical success message misses, such as unlabeled photographs, missing attachments or instructions that make sense only to the employee who wrote them.
Sources and editorial note
Prepared Nov. 5, 2026. Original practical guidance informed by the following primary sources, checked for this article. This article does not describe a specific customer or event.
