How often do backups and business recovery need to be tested?

At least twice a year and always after a major change to systems. What is tested is not just that a backup exists but that you can restore operations from it within a time the company can survive economically. The test should be recorded, with who carried it out and how long the restoration took. We take the same approach to the data and models on which the company’s AI tools run.