Planning for potential disasters, is the first stage of a Backup Disaster Recovery Plan.  In this article we look at identifying the data that will be needed in order to speed up the recovery process.  Part of data backup planning is looking at what data exists, where it is located and how it is protected. By the end of this blog you will have a much better idea on how to carry out this process in order to identify the right data to protect your business from data loss.

Background

Hopefully, your business is insured against most threats but the loss of business information is one of the biggest contributors to businesses failing.  The UK’s NCSC give some great advice to small business and backing up your data is a key part of their national campaign to protect businesses.  As an IT company we are often asked if we are able to assist in data recovery.  Most of the time this is due to the failure of a hard drive or the encryption of data after a ransomware attack.  Although it is sometimes possible to recover data it can cost hundreds and often thousands of pounds and even more frustrating is that recovery can take a long time and quite often it is not possible.

By taking time to review your entire business and where all of the data resides in your business it is possible to protect the data with backups which allow almost instant recovery with little or no cost.

What data needs backing up?

This might sound like a simple question but the answer can sometimes take a while to answer.  Each business will have its own way of “doing things” so there is no definitive answer but here are a few general rules to get you started.

Server Backup

If your business uses a server the general rule is to take a bare-metal backup.  This essentially means if the server is damaged or stolen you could get another physical box and have it up and running within a few hours.

Some people decide to back up only the files and data stored on the server and this can certainly reduce the cost of ongoing data backup.  However, in the case of a complete server failure this can leave your business vulnerable to a long and costly rebuild exercise.  A server not only has data and programs but also contains information about the computers and staff that are able to access this information.  It does this via a series of tokens which are unique to that particular setup.  Without a full server backup it would be necessary to rebuild the server, add all of the users and computers, redefine the security rules and finally setup all of the computers again so they can use the right tokens.

The bottom line is if you have a server ensure you utilise a full server backup which will protect the server setup and the data contained on it.

 

Workstations and laptops

Should computers, workstations and laptops be backed up?  This is a more complex answer as it depends on how your staff are working.  If your staff are saving documents to centralised storage such as a server, a NAS or even a cloud share such as SharePoint or Dropbox then potentially the individual computers may not need backing up.  If your staff have a habit of saving documents to their desktops, my docs or somewhere else on the physical PC then you need to have a backup in place.

Most of the time a simple file-based backup would work for these computers but beware of programs that are generating data for your business (see below)

 

Cloud Storage

Cloud Storage has revolutionised the way that businesses work by removing the requirement to invest in complex and expensive centralised storage.  However, unless you are paying for a specific backup system there is a high probability that all of this data is unprotected.

It is true that many cloud providers have your data stored in several locations and as such this is protecting the data from a specific failure. Namely a failure of the cloud hardware.  However, it does not necessarily protect data from a ransomware attack which would encrypt everything.

Cloud based storage is easy and simple to backup and having a copy stored in a second location will protect the data from all potential losses.

Cyber Security Concept

Email backup

You may be surprised to find out that unless you are paying for a specific backup, your emails are not protected.  Microsoft for instance does not backup Office 365 emails, calendars, tasks etc.  As a business you are probably more dependent on email correspondence than you realise.  How many customer and supplier contracts and agreements are stored in your email folders?  Do you have copies of these anywhere else?

Once again backing up this data should not be too difficult and whilst you are arranging it you may as well ensure data is retained for 10 years as well.  This means if a member of staff deletes information that you later need to rely on it is possible to recover individual emails right through to entire mailboxes.  For businesses that are regulated (IFAs, mortgage brokers and solicitors for example) the retention of data for a specified period of time may be part of the regulation.  For limited businesses, HMRC expects evidence to be retained for 6 years from end of the accounting period.  To be on the safe side I would always recommend 10 years.

 

Data generated from programs or applications

One of the areas often overlooked is data generated from programs that your business uses.  For instance a CRM, Sage, Quickbooks, customized databases etc.

These types of programs are made up of two parts: the actual application which you install and data which you input into the program.  For some programs a single file or folder is generated and as long as you have a copy of this then it would be possible to restore your program to a working state on another device.

Other programs have data stored in multiple files in multiple locations and they will often have an inbuilt backup utility.  This utility will generate a single file which can be used to recover your data in the case of a failure.

The important thing to note is that where this data is located is often “buried” and you will need to either ensure the entire machine is backed up or that this location is included in the backup schedule.  Backing up the file produced by the programs “inbuilt backup” is the key to easily recovering your precious data.

 

Next blog

Now the data has been identified the question is, what is the best way to back it up?  Next time we will look at the differences between onsite and offsite backups as well as how the method you choose will determine the speed of your recovery.

How can I get help

A good IT support company will be able to assist you with planning for a disaster.  If you would like us to check through your IT disaster planning document we have engineers available.

 

What next?

If your business would like to talk about planning for disasters or secure data storage then fill out our contact form, phone us or click on the appointment button below and lets start a conversation to see if we are able to help you and your business.

Our guarantee:

  • There are no hidden charges – this is a 100% free 15 minute consultation with no hidden charges.
  • We will never spam you or sell on your contact details.
  • We will treat your information with absolute confidentiality.

Why Checking for HTTPS Could Protect Your Business from Cyber Threats

Before entering your password or payment details online, take two seconds to check for the padlock icon and HTTPS in the address bar. This simple habit can help protect your business from phishing scams, fraudulent websites and data theft.

Quick Tip: How to Stay Organised with Multiple Desktops in Windows 11

Working on multiple projects at the same time? Windows 11 Virtual Desktops let you create separate workspaces for emails, Teams, project work and more, helping you reduce clutter and stay focused throughout the day.

Quick Tip: Windows Sandbox explained in 30 seconds

Not sure whether a downloaded file is safe? Windows Sandbox gives you a clean, isolated version of Windows where you can test software and open suspicious files without risking your main PC. Discover this powerful built-in security feature.

Quick Tip: Stop losing your cursor with this simple windows setting

Keep losing your mouse pointer on screen? Windows 11 lets you make your cursor larger, change its colour and even enable pointer trails. Discover this simple tweak that can make working across multiple screens far easier.

Quick Tip: The Easiest Way to Record Your Screen on Windows

Want to create screen recordings without installing extra software? Microsoft Clipchamp includes a built-in screen recorder and editor that makes it easy to create tutorials, training videos and team updates in just a few minutes.

Quick Tip: Mute Microsoft Teams Notifications

Constant Teams notifications making it difficult to focus? Learn how to quickly mute Microsoft Teams notifications so you can enjoy uninterrupted concentration while still receiving important calls and meeting alerts.

Quick tip: Zoom in on anything with Windows Magnifier

Struggling to read small text on your screen? Windows 11 includes a built-in Magnifier tool that lets you zoom in instantly with a simple keyboard shortcut. Discover how this handy feature can make spreadsheets, presentations and everyday work easier.

Quick Tip: Wirelessly Display Any Screen on Your PC

Need to show your phone or laptop screen on your PC? Windows 11 includes a built-in wireless display feature that lets you mirror and even control another device without extra cables. Here’s how to set it up in minutes.

How AI Agents Cause Governance Blind Spots

AI agents are doing more than assisting your team, they’re beginning to shape decisions and trigger actions across your firm. For regulated businesses, the question is no longer whether AI is involved, but whether you can explain and defend every outcome it influences. Here’s how to close the governance gap before it becomes a compliance issue.

Stop Forgetting Important Emails | Outlook & Microsoft To Do Tip

Stop using your inbox as a to-do list. Learn how Outlook flags automatically create tasks in Microsoft To Do, helping you track actions, set reminders and stay organised without missing important emails.

Cyber Security Infographic

Cyber attacks are no longer something that only happens to large corporations. Small and medium-sized businesses in Bristol and across the UK are increasingly being targeted, and the consequences - data loss, financial damage, reputational harm, and regulatory...

Phishing Email: Is that email from Microsoft or a phishing attempt?

Update on how realistic phishing attacks are becoming. Could you tell the difference between a real email and a phishing one?

Eternal Blue – Behind the Hack [Video Guide]

What would you do if a hacker had access to all of your sensitive documents and data through a machine that they had exploited, with access to control your webcam as well as monitor the screen and keyboard? It’s not something out of action movie, what we’re describing...

When Cybercriminals Turn On Each Other, Your Firm Still Loses

When cybercriminals start threatening each other, it can look like good news, even an opportunity. But for a regulated firm, trusting one attacker to rescue you from another is a governance risk, not a lifeline. Here is why the only reliable route through a cyber incident runs through proper protection and trusted support, and how to make sure your firm is ready before the pressure hits.

Can your business cope with winter disruption?

Thanks to the unseasonably mild weather we’ve enjoyed this autumn, it’s easy to forget that winter, and all the potential havoc it can wreak, is soon to follow. It’s hard not to feel that our weather has become more unpredictable and freak storms just aren’t, well,...

LastPass Security Breach

LastPass is a password management utility and application allowing companies and people to store their passwords. After a recent breach there are some serious security issues that need attention. This article looks at what these issues are and how to re-secure your passwords.

Fake Microsoft Azure Alerts, Why Regulated Firms Must Not Let Their Guard Down

A sophisticated new phishing campaign is exploiting Microsoft Azure Monitor to deliver scam alerts that look entirely legitimate. For regulated firms, where client trust and data governance are non-negotiable, this evolving threat demands a more rigorous approach to email verification and incident response.

Another Cyber Security zero-day exploit

On 9th November Microsoft released a fix for Windows based computers that allowed an attacker to take control of your systems as an admin.  This was known as CVE-2021-41379 and was the latest in a series of cyber security issues involving Elevation of Privilege...

Why AI is the wrong tool for Passwords

Are the passwords protecting your business as strong as you think they are? AI may seem like a smart shortcut, but when it comes to security, it could be creating hidden weaknesses you can’t afford to ignore.

IT Security: Zero Day Attack – Take Action Now

A new zero day attack is in progress and it threatens all computer systems that have Microsoft Office installed. A simple piece of code will thwart this attack until Microsoft have had a chance to release a patch