Backup

Backups that restore. Not backups that only run.

A scoped review of what you copy, where it lives, who can reach it, and the last time anyone proved a restore

Why this is its own conversation

Ransomware crews now go after the backup and the hypervisor, not only the file server. A green job in the backup console is not evidence you can recover. Insurers and boards are starting to ask for the restore test, not the logo on the appliance.

We do not need you to replace the product you already bought. We need to know whether it would survive the same week as the production systems, and whether anyone besides the one admin can run a restore.

Inventory

What is in backup, what is not, and what sits only on a laptop or a single NAS. Include Microsoft 365, line-of-business apps, and the hypervisor if you run one.

Isolation

Offline, immutable, or air-gapped copies. Domain-admin credentials that can wipe both production and backup in one night are a finding, not a footnote.

Restore proof

A dated restore of a named system, with time-to-recover written down. We can watch or facilitate. We do not accept “it should work” as the answer.

What we look at

  • 3-2-1 in practice. Three copies, two media, one off-site or offline. We mark where the chain is only on paper.
  • Retention vs storage cost. Thirty days is a starting point. A year of everything is a priced decision, same as camera footage.
  • vCenter, NAS, and SaaS. Management planes and cloud mail are where modern outages hide.
  • People. Who can restore at 2 a.m. if the usual person is on holiday. MFA on the backup console.
  • Ransomware path. Can the same account that encrypts files also delete snapshots and cloud backups?

What you receive

  • A written backup and recoverability report
  • Priority list: isolate, test, then buy more storage
  • Restore-test notes you can show an insurer or a client
  • Optional follow-on to design or harden the backup path

What this is not

  • A requirement to switch backup vendors.
  • A promise that every file is recoverable.
  • Managed backup-as-a-service unless we quote that separately.
Request a backup review Cyber assessments