The backup that said OK
Without a recovery plan
Every night the backup job reports success. Then ransomware encrypts the file server and, because the backup account has the same rights, the backups too. The last clean copy was deleted three weeks ago, when its retention period ran out.
With a recovery plan
The backups are kept apart from production and its sign-ins. Retention matches what you need to get back. Restore exercises show how long recovery takes, and there is a written plan to follow.
