The data recovery process needs to be validated too, preferably before customer data actually needs to be recovered.