Small business technology
A practical backup check for a small business
Check what your business backup protects, how often it runs and whether recovery has been tested.
What you will learn
You'll know how to check coverage, timing and recovery without risking important files.
Before you continue
Do not test a backup by deleting the only working copy of an important file.
Stop and get help if you find failed backups, missing business-critical data, no recovery method or signs of ransomware or device failure.
Know what is covered
Write down what the backup includes. Check files, accounting exports, website data, customer records, email, photos, forms and important templates.
Do not assume a system is backed up just because it is online.
Know what is not covered
Cloud sync is not always the same as a backup. If a deleted or damaged file syncs everywhere, it may disappear from every device.
Check whether the service has version history, deleted-file recovery or a separate backup.
Check how often it runs
A backup from last year may not help much today. Check whether backups run automatically and when the last successful backup happened.
If someone has to remember to plug in a drive, write down who does it and how often.
Test a small recovery
A backup is only useful if recovery works. Try restoring a small harmless file or checking a recovery preview.
Do not test by deleting the only copy of something important.
Keep one copy safer
If every copy is always connected, ransomware, accidental deletion or device failure may affect them all. Consider whether one backup copy should be separated from everyday use.
The right approach depends on the business and the systems involved.
What to expect
You can describe what your backup protects, when it last ran and whether recovery has been checked.
Sources and further reading
- Back up your data · Australian Signals Directorate
Supports backup and recovery-check guidance.
- Small business cyber security guide · Australian Signals Directorate
Supports small-business backup and cyber resilience guidance.