It is very bad business to have a Disaster Recovery process in place that has not been thoroughly tested. . .
All of the backups & restores should be tested locally before ever trying at some remote site (unless there is a 24x7 hot site that can be used at a moments notice for testing).
From what you have posted, the entire data resource for the organization may not be safe. . .
Hope this helps,