Secure your workspace · Part 4 of 4 · 2 min read
Can you restore what your team deletes?
Separate retention from backup and test the recovery of a file, mailbox, and departed employee's data.
A retained item is not yet a tested recovery.
Retention, recycle bins, version history, legal holds, and backups serve related but different purposes. The important question is whether your team can restore the information it needs, within a useful time, after the failure you are planning for.
Write down three scenarios: an accidental deletion, a compromised administrator, and a departing employee. For each, identify which copy survives, who can access it, and what could prevent restoration.
- Choose test material. Use a non-sensitive file, message, or test account. Do not experiment by deleting production records.
- Perform a supported recovery. Follow the provider's current instructions and your organization's change process.
- Inspect the result. Check content, permissions, versions, attachments, and the destination account or folder.
- Measure the work. Record elapsed time, staff effort, unavailable items, and the last point to which recovery was possible.
- Fix the gaps. Decide whether configuration, another backup copy, a different service, or a clearer procedure is needed.
A separate backup is useful only if it covers the necessary data, is protected from the failure being considered, and can be restored. Evaluate those properties instead of treating the word “backup” as an assurance.
Record the actual recovery windows.
Restoration limits vary by workload, deletion stage, edition, retention policy, and configuration. Avoid applying a single “30 days” rule to mail, files, users, and retained records.
Have the administrator record:
- What starts the clock: user deletion, trash emptying, account removal, or another event.
- Who can recover the item and through which interface.
- Whether retention or a hold changes the result.
- What happens after the supported window ends.
- The date the procedure was tested and the documentation used.
Include this record in offboarding. Data transfer and retention decisions should happen before an account is removed. Repeat the exercise after a material configuration change.
Edited September 29, 2026. Research and source dates are retained; this edit is not a fresh review of every statistic or legal development.
