Check effectiveness of corrective action

The infrastructure team runs backup restore tests every quarter, but the audit could not find a written record of the last two tests. The team confirmed that the restores worked, yet there was no test plan, no result, and no sign-off to show it. Without that record the company cannot show a customer or an auditor that a backup can really be restored.