I never liked the "be sure to make backups" and have "and be sure to test" as an afterthought (or "added corollary" in this case :-). Most ppl ignore the afterthought.

I taught my students "You don't need a backup system. You need a _restore_ system." It changes the mindset from "Yes, we make backups every night" to "Yes, we can restore the database in x hours".

I've seen way too many companies take the "we're good; we make backups" only to fail when trying to restore.

Disaster recovery is hard. For startups, I finally learned to do this drill: Restore the entire business to fully operational status on clean computers from offsite backups in under 24 hours. You always hope you won't need it, but...

You're spot on! Specifically I was referring to SQL data. Been bitten more times than I'd like to admit making a hasty change.

Edit: refined.