The belief problem

Most organizations running Cloud EPM believe they have a backup. Fewer have restored one. The gap between those two states is where the risk lives — and daily backups happening automatically produces a comfortable feeling that the problem is solved, when automatic capture is one of six things a recovery capability needs. The six: something is captured, it contains what you need, it is stored somewhere that survives the failure, it is retained long enough, you know how to restore it, and you know how long that takes. Then the recovery objectives conversation, and the point that "obviously we would need to be back the next day" is not one — get numbers, in writing, from someone with the authority to state them.