Cybersecurity
Backup and disaster recovery you have actually tested
Everyone has backups. Far fewer have restored from them. The gap between those two states is where businesses are lost.
Context
The two numbers that matter
How much data can you afford to lose, and how long can you afford to be down? Recovery point and recovery time. Agree them in advance and the backup design follows from them. Skip the conversation and you find out what your real numbers are during the incident, which is the worst possible time.
Ransomware changed the requirements. Attackers look for the backups first, so a copy reachable from the network with the same credentials is not a backup — it is one more thing being encrypted. Immutable, offsite copies are now the baseline, and insurers have started asking about it explicitly.
And a backup nobody has restored is a belief. Silent failure is common: a job that has been reporting success while excluding the one folder that mattered, for months.
Scope
What is included
- Backup of servers, endpoints, and cloud services including Microsoft 365
- Immutable copies that cannot be altered or deleted within the retention window
- Offsite retention with a schedule matched to your recovery point target
- Quarterly test restores, with the results written down and sent to you
- A documented recovery plan naming who does what, in order
- Recovery time and recovery point targets agreed and stated
Detail
Cloud is not a backup
Microsoft 365 and Google Workspace protect their infrastructure, not your data from you. A deleted mailbox, a compromised account, or ransomware syncing through OneDrive are your problem beyond the retention window, and the window is shorter than most people think.
Tenant backup is included in how we set this up rather than sold as an upgrade later.
FAQ
Questions people ask
How often do you test restores?
Quarterly at minimum, and the result is written down and sent to you. A backup report showing green is evidence the job ran, not evidence the data can come back — those are different claims and only one of them matters during an incident.
What does immutable mean?
A backup copy that cannot be modified or deleted within its retention window, by anyone, including an administrator account and including us. That is what makes it survive ransomware, because the attacker with your credentials still cannot destroy it.
Do we need this if everything is already in the cloud?
Yes. Cloud platforms protect against their own outages, not against your accidental deletion, a compromised account, or ransomware syncing through file sharing. Retention windows are also shorter than most people assume, and they run out quietly.
Related
Next step
Find out what this would look like for you
A 20-minute call. We ask what breaks, what it costs you, and who handles it now. If we are not the right fit we will say so.