An untested backup is not a backup
Almost everyone says they have backups. Few have ever verified they can come back from them.
The right question isn't "do we have backups?", it's "when did we last fully restore a system from backup, and how long did it take?". The difference between those two questions is usually the difference between a one-day pause and bankruptcy.
Leadership can demand this test without understanding anything technical: once every six months, a real restore, timed, reported in two lines. That's governance, not technical control.