Assessment -- Delivered in Days

Backup

Assessment

Know what's protected. Fix what isn't.

Most DR plans no longer reflect what's actually running in production. Coverage gaps are invisible. RTO and RPO targets are assumed, not validated. Oscar scans your live cloud environment and surfaces every gap -- with evidence, in days. No tagging required. No credentials shared.

Talk to Us About an Assessment → See All Assessments
Evidence-backed, not consultant spreadsheets
No tagging or pre-work required
Audit-ready DR Plan included
AWS, Azure, and GCP

Our AI agent Oscar Ops leverages the context graph to evaluate your live environment and deliver a complete Backup Assessment in hours not weeks.

OpsCanvas Backup Assessment cover page showing scan date, accounts scanned, and headline findings for Vantara Health Systems
Cover & Summary
What Oscar found -- unprotected resources, over-backed resources, and Glacier savings opportunity from the backup assessment
What Oscar Found
Coverage map showing backup status, schedule, retention, and vault lock for each workstream verified against live AWS APIs
Coverage Map
Critical gap findings including 9 HIPAA-scoped RDS instances with no backup plan and billing Aurora retaining only 35 days against a 7-year requirement
Critical Gaps
$4.88M
Average cost of a data breach, with backup gaps as a key factor (IBM, 2025)
12+mo
Most enterprises haven't validated DR plans against live state (Forrester, 2026)
Days
Not months. How long our assessment takes vs. traditional consulting engagements
6
Verified deliverables including coverage map, gap report, and audit-ready DR Plan
The Problem

Your backup plan reflects last year's environment.

New services spin up, configurations drift, cross-region dependencies appear, and AI agents make infrastructure changes nobody documents. Most backup assessments rely on documentation that is already stale the moment it's written.

Coverage gaps are invisible

New services, config drift, and undocumented dependencies mean your DR plan fails silently until an incident reveals what it missed. By then, it's already a problem.

RTO/RPO targets are assumed

Recovery time objectives exist in policy documents, but no one has verified they match what's actually configured in production. Assumed targets are unvalidated risk.

Testing is manual and infrequent

Recovery drills require weeks to coordinate, produce stale results, and leave the organization exposed between cycles. AI agents are now making changes nobody scheduled.

Compliance is point-in-time

Audits capture a moment in time. By the next quarter, new resources have appeared with no backup configuration, no owner, and no entry in your DR plan.

AI agents are changing your environment

AI agents are making infrastructure changes that nobody documented. Resources they create, modify, or decommission may fall outside your backup coverage entirely.

Manual discovery takes months

A traditional consulting engagement to produce this picture takes 8--16 weeks and costs far more. By the time the report arrives, the environment has already changed.

How It Works

Five workstreams. Agent-driven discovery.
Human-approved at every gate.

Oscar scans your live environment and builds the Context Graph automatically. No tagging required. No credentials leave your perimeter. Five structured workstreams run on top of it, with a human decision required before anything advances.

1

Data Inventory & Risk Mapping

Oscar scans all systems, databases, apps, and endpoints across multi-cloud, hybrid, and on-premises environments. Assets are classified by criticality, compliance requirements (HIPAA, GDPR), and threat exposure -- without requiring pre-existing tags or a manual inventory phase.

2

Define Recovery Requirements

Agents verify RPO and RTO targets against actual system configurations and SLA commitments. Gaps between what your policy documents say and what's actually configured surface as named blockers requiring explicit human review before the assessment advances.

3

Solution Audit & Gap Analysis

Reviews your existing backup architecture against the 3-2-1-1-0 standard across AWS, Azure, and GCP. Surfaces missing automation, absent encryption, and version management gaps. Identifies resources with no backup policy, no owner, or configurations that have drifted from policy.

4

Testing & Validation

Verifies that backups actually work by running controlled recovery tests and measuring real success rates and restoration times, not just assumed ones. Confirms immutability of offsite copies and air-gapped backups. Measures actual RTO against documented targets -- not assumed performance.

5

Policy & Monitoring Setup

Produces the final DR Plan with documented procedures, schedules, and personnel responsibilities. Sets up automated monitoring for backup performance, data growth, and compliance drift so your posture stays current between review cycles.

What You Get

Evidence-backed deliverables.
Not a consultant's spreadsheet.

Every deliverable is grounded in what Oscar actually observed in your live environment -- not inferred from documentation, not assembled from interviews, and not stale by the time it reaches you.

Coverage Map

Every resource in your environment and its backup status -- protected, unprotected, or misconfigured -- verified against live infrastructure, not documentation. Ownership mapped to the right team.

RTO/RPO Validation

Recovery time and recovery point objectives checked against what is actually configured in each system today -- not what the policy document says should be configured. Gaps surfaced as named, prioritized findings.

Gap Report

Prioritized list of every unprotected, misconfigured, or non-compliant resource. Each gap includes business impact estimate, ownership attribution, and recommended remediation -- ready to action immediately.

3-2-1-1-0 Compliance Assessment

Immutability verified. Offsite copies confirmed. Encryption and version management assessed across every environment and every cloud provider. Gaps flagged with evidence, not assertions.

Audit-Ready DR Plan

A formal Disaster Recovery Plan with documented procedures, schedules, and personnel responsibilities. Structured for board reporting, cyber insurance renewal, and regulatory audit submission.

Continuous Monitoring Setup

Automated monitoring configured for backup performance, data growth, and compliance drift. Not a one-time snapshot -- your posture stays current as your environment evolves. Optional ongoing subscription available.

Why OpsCanvas

The same picture. In days, not months.

Oscar builds the discovery automatically. That's the difference.

Traditional backup assessments require your team to compile inventories, gather configurations, run manual queries, and coordinate across teams -- before the consulting firm even begins analysis. That process takes weeks and produces a picture that's already stale.

OpsCanvas starts from a scan of your live environment. The Context Graph builds automatically -- resources, dependencies, ownership, backup status, and AI agent activity -- and every deliverable is grounded in what Oscar actually observed, not what your documentation says.

No tagging or pre-work required before the assessment begins
Works alongside Rubrik, Veeam, and AWS Resilience Hub -- extends them, doesn't replace them
Every finding attributed to a specific resource, owner, and configuration state
Human approval required at every gate -- nothing advances without a decision on record
Capability
OpsCanvas
Discovery method
Live scan -- no pre-work
Tagging requirement
None required
Time to deliver
Days
RTO/RPO validated against live config
Yes -- verified, not assumed
3-2-1-1-0 compliance check
Yes -- automated, evidence-backed
AI agent activity included
Yes -- agents tracked in Context Graph
Audit-ready output
Yes -- formal DR Plan included
Ongoing monitoring option
Yes -- quarterly to continuous
What Comes Next

Assessment to remediation on the same Context Graph.

The Backup Assessment surfaces the gaps. The DR Workflow closes them. And ongoing monitoring keeps your posture current as your environment changes. Each step builds on the same live Context Graph Oscar built during the assessment.

1

Backup Assessment

Oscar scans your environment, builds the Context Graph, and delivers your gap report, RTO/RPO validation, and DR Plan.

2

Ongoing Monitoring

Quarterly, monthly, or continuous reassessment keeps your posture current and surfaces drift as your environment evolves.

3

DR Workflow

The AI-governed remediation engine that closes the gaps the assessment surfaced. Agents execute. Humans approve every material change.

Frequently Asked Questions

Common questions about the Backup Assessment

What does the OpsCanvas Backup Assessment cover?

The OpsCanvas Backup Assessment covers every resource in your cloud environment and produces six deliverables: a coverage map of every protected and unprotected resource verified against live infrastructure, RTO/RPO validation against actual configurations, a 3-2-1-1-0 compliance assessment, a prioritized gap report with ownership attribution, an audit-ready DR Plan, and optional continuous monitoring setup. All findings are grounded in what Oscar observed in your live environment.

How long does the Backup Assessment take?

The OpsCanvas Backup Assessment is delivered in days, not weeks or months. Because Oscar builds the Context Graph automatically from your live environment without requiring tagging or manual configuration, the discovery phase that would take a consulting team weeks happens in hours. A traditional consulting engagement for comparable coverage typically takes 8--16 weeks.

Does the Backup Assessment require AWS tagging or a manual inventory phase?

No. Oscar scans your live cloud environment and infers resource ownership, dependencies, and backup status from runtime behavior and IaC repositories. No tagging is required, and no manual inventory work is needed before the assessment begins. This is one of the core ways OpsCanvas differs from traditional consulting approaches.

What is 3-2-1-1-0 compliance and does the assessment check for it?

The 3-2-1-1-0 standard requires three copies of data, on two different media types, with one copy offsite, one copy offline or air-gapped, and zero unverified backups. The OpsCanvas Backup Assessment verifies each of these requirements against your live environment -- checking immutability of offsite copies, encryption, version management, and backup success rates across AWS, Azure, and GCP.

Does this work with the backup tools we already use?

Yes. OpsCanvas is complementary to Rubrik, Veeam, Cohesity, AWS Backup, and Azure Backup -- it does not replace them. Those tools store and restore your data. OpsCanvas validates your posture: whether your backup configurations match your recovery objectives, where coverage gaps exist, and whether your DR plan reflects what's actually running in production.

What happens after the Backup Assessment?

After the Backup Assessment, OpsCanvas can set up ongoing monitoring to track backup coverage, data growth, and compliance drift on a quarterly, monthly, or continuous basis. For teams ready to close the gaps the assessment identified, the DR Workflow is the AI-governed remediation engine that implements the findings -- with Oscar discovering, agents executing, and humans approving every material decision.

Get Started

Your backup plan says one thing.
Your live environment may say another.

Talk to us about a Backup Assessment. We'll walk through your environment, scope the engagement, and show you what Oscar finds in your first session -- no tagging required, no credentials shared.

Complementary to Rubrik, Veeam & AWS Backup · AWS, Azure & GCP · Audit-ready DR Plan included