Guides: backup, DRP, BCP and IT continuity

Clear answers to the questions business leaders and IT managers ask: how to back up, how long to keep data, how to restart after a disaster, and what to do when an incident strikes.

Incident in progress? Server down, ransomware, missing file: follow our “What to do if” guides or call us.

+33 9 72 50 78 28

The IT backup guide

Understand what a real backup is, where to store it, how long to keep it and how to protect it from ransomware. See the section

What is an IT backup?A backup is a restorable copy, kept separate from the original, that lets you return to an earlier state after a failure, an error or an attack.What is the difference between backup and replication?Replication copies the current state, errors included. A backup keeps earlier versions so you can restore a healthy state.What is the difference between backup and archiving?A backup is for resuming operations. Archiving keeps a document intact for the period required by your business or by law.What backup strategy for an SME?An SME first protects the systems people need to work, with an off-site history, an unmodifiable copy and a restore test.How long should you keep your backups?Keep a few weeks of backups to resume work, and a separate, longer archive only for documents that must serve as evidence.How many backups should you keep?Keep at least three copies of your data, one off site and one that cannot be erased, and enough dates to go back to before the incident.Where should you store your backups?Store a copy outside the building and outside the administration network, preferably encrypted and not erasable by everyday accounts.Should you outsource your backups?Yes, whenever a disaster or ransomware on the internal network must leave an intact copy. A local copy remains useful to restore a file quickly.Why keep an off-site backup?An off-site backup survives fire, flooding and an attack that encrypts everything reachable on the local network.How to protect your backups from ransomwareKeep a copy off the network, block its deletion for a set period, separate accounts and check that a pre-attack version can be restored.What is an immutable backup?An immutable backup cannot be modified or deleted for a set period, even by an administrator. Definition, limits and implementation.What is WORM storage?WORM storage (write once, read many) accepts a single write, then only reads, until the end of a retention period.Immutable backup: how long should data be kept?Against ransomware, lock for 30 to 90 days. For a legal obligation, lock for the period set by law, and only the documents concerned.How should you back up a physical server?Back up the image of the physical server, not just its files, and keep an off-site copy so you do not have to reinstall the system by hand.How should you back up a virtual machine?Back up a virtual machine with a tool that understands its state, and check that it restarts somewhere other than on the original hypervisor.How do you back up a NAS?A NAS is not a backup. Copy its shares and keep its configuration off the device, or a NAS failure takes both the originals and the only copy.How do you back up Microsoft 365?Back up Exchange, OneDrive and SharePoint outside the Microsoft tenant, mailbox by mailbox, with a history the tenant administrator cannot erase.How do you back up Google Workspace?Copy Gmail, Drive, Calendar and shared drives outside the Google domain, with a version history independent of the recycle bins and Vault.How can you test that a backup works?A backup works if you restore a file, a database or a machine and the result is usable. A log showing “success” is not enough.How can you tell whether a business is really protected against data loss?A business is protected if it can name its last successful restore test, the time taken, where the copies are and who holds the key.

DRP and BCP: the IT continuity guide

Recovering after a disaster or carrying on through it: definitions, costs, RPO, RTO, testing and a method suited to SMEs. See the section

What is a DRP?A DRP is the written, tested procedure for restarting operations after a disaster, usually on a standby environment, within an accepted timeframe.What is a BCP?A BCP keeps essential services running during an outage. The standby environment is already up; it is not built after the disaster.What is the difference between a DRP and a BCP?A BCP limits downtime because the standby is already running. A DRP accepts downtime, then restarts servers from a chosen backup.DRP or BCP: which should you choose?Choose a BCP if downtime is counted in minutes and is already too costly. Choose a DRP if a few hours of downtime are acceptable.How much does a DRP cost?A DRP costs monthly preparation (copies, agents, addresses) plus per-day activation on the day of a disaster. The standby is not running all the time.How much does a BCP cost?A BCP is paid for every month, incident or not, because the standby instances stay on. The price follows the number and size of servers.How do you build a DRP for an SME?An SME's DRP comes down to a list of servers, an accepted timeframe, a place to restart and a dated test. The rest is detail.How do you test a DRP?Test a DRP in stages, from the document to a real failover. A server showing a login screen does not prove the business can actually work.How often should you test your DRP?Check boot often, and run a real failover at least once a year, plus after every change of server or key person.What is an RPO?The RPO is the maximum amount of work you are prepared to lose, expressed as the time elapsed since the last restorable copy.What is an RTO?The RTO is the maximum acceptable downtime, from the moment of the incident until the service is usable again.How do you set your RPO?You set the RPO by costing what it takes to redo N hours of work, then choosing the copy frequency that this cost justifies.How do you set your RTO?You set the RTO by costing each hour of downtime, then comparing it with the actual duration of a restore you have already timed.What should you do after a cyberattack?After a cyberattack, isolate systems, preserve evidence, find a clean copy, and never restore onto a network that is still compromised.How do you restart your IT systems after ransomware?Restart from a copy made before the intrusion, on a clean network, in a set order, after removing the attacker's access.How do you ensure continuity for a critical server?A critical server needs an off-site copy, a sized standby, a start-up order and a dated test. The rest of the infrastructure can wait.How do you keep a business application available during an outage?A business application stays available if its standby is already reachable, with consistent data, without reconfiguring workstations one by one.Outsourced DRP: pros and consAn outsourced DRP avoids a second site. It depends on the provider, the link, the encryption key and a test you still need to carry out.Outsourced BCP: pros and consAn outsourced BCP runs the standby at a provider. It needs a live on-site agent, a sufficient link and a prepared failback.

Backing up Microsoft 365 and Google Workspace

What the providers actually keep, what they do not guarantee, and how to keep your own copy of emails, files and calendars. See the section

Backing up Microsoft 365: what you need to knowMicrosoft 365 hosts your email and files, but standard plans keep no independent copy you can restore after a serious mistake.Should you back up Microsoft 365?Yes, as soon as losing a mailbox or a team site for more than a few days would be serious. Microsoft's redundancy does not cover that case.How to back up Microsoft 365 emailsBack up Exchange Online mailbox by mailbox, outside the tenant, shared mailboxes included, and test a restore to a test mailbox at least twice a year.Backing up SharePoint and OneDriveSharePoint and OneDrive hold your team files. Their recycle bins and versions do not replace a dated copy kept outside the tenant.Backing up Google WorkspaceBacking up Google Workspace means copying Gmail, Drive, Calendar and shared drives outside the domain, with restore dates.Should you back up Google Workspace?Yes, if Gmail or Drive carry your business. The bin, account restore and Vault only cover short windows or legal use.Backing up business GmailA business Gmail backup copies mailboxes outside the Google domain, labels included, with several restore points and a restore test.Backing up business Google DriveShared drives are many teams' file server. The thirty-day bin is no substitute for a dated copy kept outside Google.Does Microsoft 365 really include a backup of your data?Not in standard plans. Microsoft sells Microsoft 365 Backup separately, and it stays in its cloud. A copy outside the tenant is an extra choice.Does Google Workspace really include a backup of your data?No. Google provides redundancy, a bin of about thirty days and, depending on the edition, Vault. None of these is a backup outside the domain.

What to do if…: the right moves when an incident occurs

Server down, ransomware, missing file, emptied mailbox: the steps in the right order, before restoring anything. See the section

My server is down: what should I do?Isolate the failure, check the data, find the last clean restore point, restore, then decide whether this server belongs in your DRP.Ransomware has just struckDisconnect the affected machines, do not pay on the spot, do not reformat, and look for a backup taken before the intrusion.A file or folder has disappearedCheck the recycle bin and local versions first, then restore the most recent backup point that still contains a good copy of the file.A mailbox has been emptied or hackedRevoke sessions and forwarding first, then restore the mailbox to a date before it was emptied. Restoring without stopping the leak is pointless.The NAS is not respondingTell an unreachable NAS from one whose disks have died. Restore from the external copy, not from the RAID in the same device.Last night’s backup failedOne failed night can be caught up. Several failed nights wipe out the promised RPO. Fix the cause the same day and check again the next day.

Protect your data with WeDoBack

Encrypted offsite backup, immutable storage, DRP and BCP: tell us about your servers and we will recommend the right combination.

Request a quote See offers and prices