Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Recovery assurance practiceIntermediate

Recovery Testing and Restore Assurance

Recovery testing and restore assurance verify that protected data, systems, dependencies, procedures, and personnel can meet defined recovery needs.

Framework mapping

MITRE ATT&CK® Enterprise mapping

Catalog v19.2
techniqueT1490 — Inhibit System Recovery

Tactics: Impact

Platforms: Windows, Linux, macOS, IaaS, Network Devices, ESXi

Relationship: resilience and mitigation context

Open the official ATT&CK object ↗

Editorial mapping of an inherited BMC article to related Enterprise ATT&CK behavior, control, evidence, architecture, or risk context. Mapping roles state the relationship and do not assert equivalence unless labeled direct.

MITRE D3FEND connection

Related defensive techniques

Inferred and experimental: These relationships are generated from D3FEND graph paths. They are hypotheses for analysis, not proof of prevention, detection, or control effectiveness.

MITRE D3FEND™ and the D3FEND logo are trademarks of The MITRE Corporation. MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation.

What it means

Recovery testing and restore assurance verify that protected data, systems, dependencies, procedures, and personnel can meet defined recovery needs.

Why it matters

A completed backup job does not prove that a trusted service can be restored within required time and data-loss limits.

Practical focus

  • Test representative full and partial restores
  • Validate integrity, dependencies, and access
  • Measure results against recovery objectives
  • Record failures and retest corrective actions

Common mistakes

  • Testing only file retrieval
  • Restoring into an unrealistic environment
  • Ignoring identity, network, and key dependencies
  • Reporting success without business validation

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

GIAC GCCCGIAC GSECCompTIA Security+ISC2 CISSPISC2 CGRC

Authoritative sources