Planning for potential disasters, is the first stage of a Backup Disaster Recovery Plan.  In this article we look at identifying the data that will be needed in order to speed up the recovery process.  Part of data backup planning is looking at what data exists, where it is located and how it is protected. By the end of this blog you will have a much better idea on how to carry out this process in order to identify the right data to protect your business from data loss.

Background

Hopefully, your business is insured against most threats but the loss of business information is one of the biggest contributors to businesses failing.  The UK’s NCSC give some great advice to small business and backing up your data is a key part of their national campaign to protect businesses.  As an IT company we are often asked if we are able to assist in data recovery.  Most of the time this is due to the failure of a hard drive or the encryption of data after a ransomware attack.  Although it is sometimes possible to recover data it can cost hundreds and often thousands of pounds and even more frustrating is that recovery can take a long time and quite often it is not possible.

By taking time to review your entire business and where all of the data resides in your business it is possible to protect the data with backups which allow almost instant recovery with little or no cost.

What data needs backing up?

This might sound like a simple question but the answer can sometimes take a while to answer.  Each business will have its own way of “doing things” so there is no definitive answer but here are a few general rules to get you started.

Server Backup

If your business uses a server the general rule is to take a bare-metal backup.  This essentially means if the server is damaged or stolen you could get another physical box and have it up and running within a few hours.

Some people decide to back up only the files and data stored on the server and this can certainly reduce the cost of ongoing data backup.  However, in the case of a complete server failure this can leave your business vulnerable to a long and costly rebuild exercise.  A server not only has data and programs but also contains information about the computers and staff that are able to access this information.  It does this via a series of tokens which are unique to that particular setup.  Without a full server backup it would be necessary to rebuild the server, add all of the users and computers, redefine the security rules and finally setup all of the computers again so they can use the right tokens.

The bottom line is if you have a server ensure you utilise a full server backup which will protect the server setup and the data contained on it.

 

Workstations and laptops

Should computers, workstations and laptops be backed up?  This is a more complex answer as it depends on how your staff are working.  If your staff are saving documents to centralised storage such as a server, a NAS or even a cloud share such as SharePoint or Dropbox then potentially the individual computers may not need backing up.  If your staff have a habit of saving documents to their desktops, my docs or somewhere else on the physical PC then you need to have a backup in place.

Most of the time a simple file-based backup would work for these computers but beware of programs that are generating data for your business (see below)

 

Cloud Storage

Cloud Storage has revolutionised the way that businesses work by removing the requirement to invest in complex and expensive centralised storage.  However, unless you are paying for a specific backup system there is a high probability that all of this data is unprotected.

It is true that many cloud providers have your data stored in several locations and as such this is protecting the data from a specific failure. Namely a failure of the cloud hardware.  However, it does not necessarily protect data from a ransomware attack which would encrypt everything.

Cloud based storage is easy and simple to backup and having a copy stored in a second location will protect the data from all potential losses.

Cyber Security Concept

Email backup

You may be surprised to find out that unless you are paying for a specific backup, your emails are not protected.  Microsoft for instance does not backup Office 365 emails, calendars, tasks etc.  As a business you are probably more dependent on email correspondence than you realise.  How many customer and supplier contracts and agreements are stored in your email folders?  Do you have copies of these anywhere else?

Once again backing up this data should not be too difficult and whilst you are arranging it you may as well ensure data is retained for 10 years as well.  This means if a member of staff deletes information that you later need to rely on it is possible to recover individual emails right through to entire mailboxes.  For businesses that are regulated (IFAs, mortgage brokers and solicitors for example) the retention of data for a specified period of time may be part of the regulation.  For limited businesses, HMRC expects evidence to be retained for 6 years from end of the accounting period.  To be on the safe side I would always recommend 10 years.

 

Data generated from programs or applications

One of the areas often overlooked is data generated from programs that your business uses.  For instance a CRM, Sage, Quickbooks, customized databases etc.

These types of programs are made up of two parts: the actual application which you install and data which you input into the program.  For some programs a single file or folder is generated and as long as you have a copy of this then it would be possible to restore your program to a working state on another device.

Other programs have data stored in multiple files in multiple locations and they will often have an inbuilt backup utility.  This utility will generate a single file which can be used to recover your data in the case of a failure.

The important thing to note is that where this data is located is often “buried” and you will need to either ensure the entire machine is backed up or that this location is included in the backup schedule.  Backing up the file produced by the programs “inbuilt backup” is the key to easily recovering your precious data.

 

Next blog

Now the data has been identified the question is, what is the best way to back it up?  Next time we will look at the differences between onsite and offsite backups as well as how the method you choose will determine the speed of your recovery.

How can I get help

A good IT support company will be able to assist you with planning for a disaster.  If you would like us to check through your IT disaster planning document we have engineers available.

 

What next?

If your business would like to talk about planning for disasters or secure data storage then fill out our contact form, phone us or click on the appointment button below and lets start a conversation to see if we are able to help you and your business.

Our guarantee:

  • There are no hidden charges – this is a 100% free 15 minute consultation with no hidden charges.
  • We will never spam you or sell on your contact details.
  • We will treat your information with absolute confidentiality.

Quick tip: Zoom in on anything with Windows Magnifier

Struggling to read small text on your screen? Windows 11 includes a built-in Magnifier tool that lets you zoom in instantly with a simple keyboard shortcut. Discover how this handy feature can make spreadsheets, presentations and everyday work easier.

Quick Tip: Wirelessly Display Any Screen on Your PC

Need to show your phone or laptop screen on your PC? Windows 11 includes a built-in wireless display feature that lets you mirror and even control another device without extra cables. Here’s how to set it up in minutes.

How AI Agents Cause Governance Blind Spots

AI agents are doing more than assisting your team, they’re beginning to shape decisions and trigger actions across your firm. For regulated businesses, the question is no longer whether AI is involved, but whether you can explain and defend every outcome it influences. Here’s how to close the governance gap before it becomes a compliance issue.

Stop Forgetting Important Emails | Outlook & Microsoft To Do Tip

Stop using your inbox as a to-do list. Learn how Outlook flags automatically create tasks in Microsoft To Do, helping you track actions, set reminders and stay organised without missing important emails.

Is your business storing files on desktops?

Learn why storing business files on desktop PCs can be risky and how OneDrive and SharePoint help protect your data with automatic backup, secure access, and improved business continuity.

How Would You Stop AI in an Emergency?

If an AI tool in your firm did something it shouldn’t: sent incorrect advice, exposed client data or triggered a compliance breach; could you intervene quickly and explain what happened to a regulator? For most professional firms, the honest answer is not confidently. This post explores why AI governance is now as critical as any other risk framework in your business, and what you can do about it today.

Files Opening In Wrong App

A simple guide for business owners and teams who want files, links and documents to open in the right app every time.

Is Your Data Security Keeping Pace With Your Business?

Most professional service firms believe their data security is under control — but confidence and compliance readiness are not the same thing. As cloud platforms, legacy systems and AI tools increase complexity beneath the surface, the gap between perceived security and actual governance grows. This post examines the questions every regulated firm should be asking about where data lives, who has access, and whether the answers would satisfy an auditor.

Why do so many AI projects go nowhere? (A risk-first approach for regulated firms)

Many AI projects stall in regulated firms because the goal is unclear and the risk feels ownerless. Here’s a practical, governance-led way to adopt AI safely, prove value, and keep humans accountable for every decision.

Stop Replacing PCs Early: Build a “Device Health” Routine Instead

A PC usually doesn’t “get old” overnight — it gets burdened. The good news? A few small Windows 11 habits (and one simple monthly routine) can keep business devices running faster for longer and delay expensive replacements.

Have you made these IT upgrades?

Technology is constantly changing and adapting; as such, it is important to always stay on top of upgrades to ensure you are running at optimum efficiency. At Absolutely PC, IT upgrades are a necessary and consistent part of our monthly and annual maintenance...

Is Your Data Security Keeping Pace With Your Business?

Most professional service firms believe their data security is under control — but confidence and compliance readiness are not the same thing. As cloud platforms, legacy systems and AI tools increase complexity beneath the surface, the gap between perceived security and actual governance grows. This post examines the questions every regulated firm should be asking about where data lives, who has access, and whether the answers would satisfy an auditor.

IT Security: Zero Day Attack – Take Action Now

A new zero day attack is in progress and it threatens all computer systems that have Microsoft Office installed. A simple piece of code will thwart this attack until Microsoft have had a chance to release a patch

How To Fix Windows ‘PrintNightmare’ Vulnerability – Video

Microsoft is warning Windows users about a currently unpatched security flaw in the Windows Print Spooler service which is being actively exploited. Whilst waiting on a fix from Microsoft, Window's PCs are potentially vulnerable to be hacked whenever they are switched...

Phishing Email: Is that email from Microsoft or a phishing attempt?

Update on how realistic phishing attacks are becoming. Could you tell the difference between a real email and a phishing one?

Man In The Middle – Behind the Hack [Video Guide]

Cybersecurity (cyber security) is a buzzword that seems to have appeared relatively quickly in the world of business IT.  If you search the term “cybersecurity” or “cyber security” on the BBC News website, there are currently 29 pages of articles from the last 2...

Old Passwords Are Still Unlocking Systems

Old passwords your team hasn’t used in years could still unlock your systems — and attackers know it. A recent cyber incident revealed how forgotten credentials put professional service firms at serious risk, and why enforcing MFA has never been more important.

Why AI is the wrong tool for Passwords

Are the passwords protecting your business as strong as you think they are? AI may seem like a smart shortcut, but when it comes to security, it could be creating hidden weaknesses you can’t afford to ignore.

4000 small businesses a day: the vicious spread of WannaCry

In May this year the online world witnessed the Wannacry ransomware attack, a cryptoworm which spread like wildfire, demanding payments in the cryptocurrency Bitcoin in over 230,000 computers using the Windows operating system. The National Health Service, the UK's...

Cyber Security Infographic

Cyber attacks are no longer something that only happens to large corporations. Small and medium-sized businesses in Bristol and across the UK are increasingly being targeted, and the consequences - data loss, financial damage, reputational harm, and regulatory...