HEALTHCARE CYBERSECURITY · CYBER-MED
Healthcare backups: test restoration before an emergency.
An available copy is a starting point. An authorised test helps check data, access and the steps needed to resume work.
From a copy to being able to use it
Having a backup raises a practical question: can we recover what we need? The NCSC recommends testing backups regularly and understanding how to restore them before they are needed. A test connects the stored copy with the people and steps that make it usable.
In healthcare this discussion also concerns work that depends on the systems. The voluntary HHS goals include incident response and recovery preparedness; priorities need to be defined for the organisation’s setting.
An example for designing a test
Consider a fictional archive of organisational documents. The team agrees on a test in a dedicated environment using dummy data: identify a copy, check authorised access and confirm that restored documents are readable. A planned test should follow the organisation’s procedures and the scope agreed with IT owners.
- Which data and which backup version are being checked?
- Who has authorised access and who checks the result?
- Which steps work, which need clarification and what problems arise?
Record the result and improve the process
The test produces a record: date, scope, copy used, observed times, outcome and issues encountered. This information helps update the procedure and select further checks. The timing of a limited test is not a promise about recovery times for the entire organisation.
An initial discussion with Cyber-Med can start with the relevant systems and the assessment goal. A general description is enough; confidential documents and health data are not needed in the first message.
Sources and further reading
NCSC — 10 Steps to Cyber Security: Data security
HHS — Healthcare Cybersecurity Performance Goals
Sources checked on 12/10/2026. NCSC guidance is general; HHS goals are voluntary and directed at US healthcare. They do not constitute Italian obligations or company certifications. The example and practical questions are Cyber-Med’s educational suggestions.
Scopri il servizio Cyber-Med ↗
The topic in 35 seconds
Silent educational video with Italian on-screen text. Italian and English subtitles and transcript are available.
Read the transcript
- 00:00–00:07 The copy exists. Can it be restored? An authorised test helps check data, access and procedural steps.
- 00:07–00:14 Which data do we start with? Fictional example: organisational documents in a test environment, without health data.
- 00:14–00:21 Is the restored file readable? Check the selected copy, authorised access and the restored content.
- 00:21–00:28 What have we learnt? Record observed times, steps and problems. Improve the procedure.
- 00:28–00:35 Test before an emergency. One test does not guarantee every outcome. Let’s define the first scenario: info@cyber-med.it
View the carousel: 5 cards
