Start with a file your business needs
Choose a representative file that someone can verify, such as a blank template or a non-sensitive operations document. Ask whoever manages your backups to restore an earlier version to an approved test location. Open it and check that the contents are intact.
Measure what it took
Note how old the restored copy was, how long it took to retrieve, and which accounts were needed. Then ask whether that recovery time and potential data loss would be acceptable on a normal business day.
Test recovery beyond one file
A file restore is a starting point. List the systems your team would need first after an outage, then arrange separate tests for the data and applications they rely on. Assign someone to own the schedule and document the results.
Further reading: CISA’s StopRansomware Guide