{"id":32743,"date":"2026-10-07T18:12:57","date_gmt":"2026-10-07T16:12:57","guid":{"rendered":"https:\/\/eu.wedoback.com\/?page_id=32743"},"modified":"2026-10-07T18:37:49","modified_gmt":"2026-10-07T16:37:49","slug":"is-your-business-really-protected","status":"publish","type":"page","link":"https:\/\/eu.wedoback.com\/en\/guides\/backup\/is-your-business-really-protected\/","title":{"rendered":"How can you tell whether a business is really protected against data loss?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"32743\" class=\"elementor elementor-32743 elementor-31932\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f4bec63 e-con-full wdb-g e-flex e-con e-parent\" data-id=\"f4bec63\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-f97d20b e-con-full wdb-g-hero e-flex e-con e-parent\" data-id=\"f97d20b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-f86bce4 e-con-full wdb-g-hero-in e-flex e-con e-parent\" data-id=\"f86bce4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1559fb5 elementor-widget elementor-widget-text-editor\" data-id=\"1559fb5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/backup\/\">IT backup<\/a><\/p><p class=\"wdb-g-pill\" style=\"--pill:#01adb9\">IT backup<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e5fe610 elementor-widget elementor-widget-heading\" data-id=\"e5fe610\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">How can you tell whether a business is really protected against data loss?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5d31cde elementor-widget elementor-widget-text-editor\" data-id=\"5d31cde\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-lead\">A business is really protected if, for the systems that keep it running, it can show a recent successful restore, a copy that does not share the fate of the server, and a person able to do it again without improvising. The volume purchased, the software logo or the phrase \u201cwe are backed up\u201d are not enough to conclude.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-afeb329 elementor-widget elementor-widget-text-editor\" data-id=\"afeb329\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>3 min<\/b> read<\/span><span><b>6<\/b> sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2bb52ce e-con-full wdb-g-body e-flex e-con e-parent\" data-id=\"2bb52ce\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-426f750 e-con-full wdb-g-grid e-flex e-con e-parent\" data-id=\"426f750\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-c1f154e e-con-full wdb-g-article e-flex e-con e-parent\" data-id=\"c1f154e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9265f1f elementor-widget elementor-widget-text-editor\" data-id=\"9265f1f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-key\"><h2>Key points<\/h2><ul><li>Protection is assessed <strong>on a defined scope<\/strong>: the short list of systems without which the business stops.<\/li><li>Nine questions are enough; <strong>a vague answer counts as a no<\/strong>.<\/li><li>If an everyday administrator account can erase a copy, <strong>so can ransomware<\/strong>.<\/li><li>More than <strong>twelve months without a restore test<\/strong>: protection is just an assumption.<\/li><li>Insurers and auditors mainly ask for <strong>the report of the last test<\/strong>, not the product name.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1a43948 elementor-widget elementor-widget-text-editor\" data-id=\"1a43948\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>The questions that settle it<\/h2><p>Ask them of management and of the person who administers the systems. Vague answers count as a no.<\/p><ol><li><strong>Which systems, if lost tonight, would stop the business tomorrow?<\/strong> Without a short list, protection has no scope. Good-practice guides start with exactly this: identifying the devices and data to back up.<\/li><li><strong>When was the last successful backup of each one?<\/strong> \u201cNormally last night\u201d is not a date. A screen or an alert email is.<\/li><li><strong>Where is the copy if the building burns down?<\/strong> Same room, same administration network, or another location. The CNIL, France&#8217;s data protection authority, recommends at least one backup at a geographically separate site.<\/li><li><strong>Can an everyday administrator account erase this copy?<\/strong> If so, ransomware can too. The ANSSI, France&#8217;s national cybersecurity agency, calls for dedicated backup accounts and at least one offline copy.<\/li><li><strong>When did you last carry out a real restore, of what, and how long did it take?<\/strong> More than twelve months without a test: protection is just an assumption.<\/li><li><strong>Who has the encryption key and the instructions if that person is on leave?<\/strong> A single key in one employee&#8217;s head is a point of failure. The ANSSI recommends defining who holds the keys, where they are stored and how they are backed up.<\/li><li><strong>What downtime does management accept, and did the last restore fit within it?<\/strong> Otherwise the RTO is just a wish.<\/li><li><strong>Is cloud email within scope?<\/strong> Many businesses protect the file server and forget <a href=\"\/en\/guides\/backup\/how-to-back-up-microsoft-365\/\">Microsoft 365<\/a> or <a href=\"\/en\/guides\/backup\/how-to-back-up-google-workspace\/\">Google Workspace<\/a>, where the real work is done.<\/li><li><strong>What happens at the weekend?<\/strong> An alert that is only read on Monday delays the discovery of a failure accordingly.<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3ce4e2d elementor-widget elementor-widget-text-editor\" data-id=\"3ce4e2d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>A simple score<\/h2><table><thead><tr><th>Answer<\/th><th>Interpretation<\/th><\/tr><\/thead><tbody><tr><td>List of systems, off-site copy, immutable or offline, test less than twelve months old, two capable people<\/td><td>Real protection on the listed scope<\/td><\/tr><tr><td>Software in place, green logs, no tests, copy on the local NAS<\/td><td>Protection against a minor disk failure only<\/td><\/tr><tr><td>\u201cThe provider takes care of it\u201d, with no contractual response time or test<\/td><td>Protection not verified<\/td><\/tr><tr><td>No copy of cloud email<\/td><td>A gap in the main work tool<\/td><\/tr><\/tbody><\/table><p>Protection always applies <strong>to a defined scope<\/strong>. An SME can be very well protected for its ERP and completely exposed on two sales reps&#8217; laptops. Saying so is more useful than an overall percentage.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-208c375 elementor-widget elementor-widget-text-editor\" data-id=\"208c375\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What an external audit also looks at<\/h2><p>Cyber insurers and auditors generally ask for the same evidence: architecture of the copies, retention period, result of the last test, management of access to the console, and the incident procedure. They rarely ask for the product name. They ask for the report of the last test.<\/p><p>The incident procedure must also cover the formalities: a complaint to the police in your country, online where possible, and a claim to your insurer. Check your cyber insurance policy for the deadlines for reporting and filing a complaint: they vary by country and insurer.<\/p><p>For businesses within the scope of the European NIS 2 Directive, transposed into the law of each Member State, this is no longer just a matter of good practice: Article 21 lists business continuity, backup management and business recovery among the risk management measures to be put in place.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a4f99e5 elementor-widget elementor-widget-text-editor\" data-id=\"a4f99e5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-brand\"><h2>At WeDoBack<\/h2><p>The service provides the encrypted off-site copy, on servers dedicated to backup and replicated in several European countries (or in the zone required by law), and 24\/7 backup monitoring with an alert in the event of failure. If subscribed, it adds <a href=\"\/en\/immutable-offer\/\">immutability<\/a>, restart on standby instances (<a href=\"\/en\/drp-offer\/\">DRP<\/a>) or takeover by continuously running instances (<a href=\"\/en\/bcp-offer\/\">BCP<\/a>). It does not replace answers 1, 5 and 6: the scope, the test and safekeeping of the key remain the customer&#8217;s responsibility. <a href=\"\/en\/integral-offer\/\">INTEGRAL<\/a> includes two hours of support per month to help with these tasks. <a href=\"\/en\/smart-offer\/\">SMART<\/a> leaves operations to the customer and bills support per intervention. Support can be reached on +33 9 72 50 78 28 from 9:00 to 13:00 and from 14:00 to 17:30 (Paris time). In any case, a business that has never carried out a restore is not \u201cprotected by WeDoBack\u201d. It has a subscription.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/contact\/\">Contact us<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f596818 elementor-widget elementor-widget-text-editor\" data-id=\"f596818\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-faq\"><h2>Frequently asked questions<\/h2><details><summary>Is having an IT service provider enough to be protected?<\/summary><p>No, not in itself. Check what the contract actually provides for: scope backed up, location of copies, retention period, restore tests, response time. Ask for the report of the last test. Without these elements, protection has not been verified.<\/p><\/details><details><summary>Is my business covered by NIS 2?<\/summary><p>The European NIS 2 Directive targets essential and important entities in many sectors, depending on their size and activity. For those concerned, it explicitly lists backup management and business recovery among the mandatory security measures. Even if you fall outside its scope, its list is a good benchmark.<\/p><\/details><details><summary>Where should you start if the answers are poor?<\/summary><p>With the list of critical systems, then a test restore of the most important one. This first test almost always reveals the real gaps: missing copy, key that cannot be found, time that is too long. You then fix them in that order.<\/p><\/details><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2c95d87 elementor-widget elementor-widget-text-editor\" data-id=\"2c95d87\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"wdb-g-related\"><a href=\"\/en\/guides\/backup\/how-to-test-a-backup\/\"><small>IT backup<\/small>How do you test that a backup works?<\/a><a href=\"\/en\/guides\/backup\/backup-strategy-for-an-sme\/\"><small>IT backup<\/small>What backup strategy for an SME?<\/a><a href=\"\/en\/guides\/drp-bcp\/how-to-set-your-rto\/\"><small>DRP and BCP<\/small>How do you determine your RTO?<\/a><a href=\"\/en\/guides\/backup\/protect-backups-from-ransomware\/\"><small>IT backup<\/small>How do you protect your backups against ransomware?<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-898507a elementor-widget elementor-widget-text-editor\" data-id=\"898507a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-sources\"><h2>Sources<\/h2><p class=\"wdb-g-src-date\">Documents consulted in October 2026.<\/p><ol><li><a href=\"https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi_fondamentaux_sauvegarde_systemes_dinformation_v1.1.pdf\" target=\"_blank\" rel=\"noopener\">Backing up information systems \u2013 The fundamentals (ANSSI-BP-100, v1.1, 27 November 2025)<\/a> \u2014 ANSSI (French agency)<\/li><li><a href=\"https:\/\/www.cnil.fr\/fr\/securite-sauvegarder\" target=\"_blank\" rel=\"noopener\">Security: Backing up<\/a> \u2014 CNIL (French authority)<\/li><li><a href=\"https:\/\/www.enisa.europa.eu\/publications\/cybersecurity-guide-for-smes\" target=\"_blank\" rel=\"noopener\">Cybersecurity guide for SMEs \u2013 12 steps to securing your business (June 2021)<\/a> \u2014 ENISA, the European Union Agency for Cybersecurity<\/li><li><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/FR\/TXT\/HTML\/?uri=CELEX%3A32022L2555\" target=\"_blank\" rel=\"noopener\">Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS 2), Article 21<\/a> \u2014 EUR-Lex<\/li><li><a href=\"https:\/\/www.europol.europa.eu\/report-a-crime\/report-cybercrime-online\" target=\"_blank\" rel=\"noopener\">Report cybercrime online (online reporting services by country)<\/a> \u2014 Europol<\/li><li><a href=\"https:\/\/www.wedoback.com\/offres-et-tarifs\/\" target=\"_blank\" rel=\"noopener\">Offers and prices<\/a> \u2014 WeDoBack<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ceba291 e-con-full wdb-g-aside e-flex e-con e-parent\" data-id=\"ceba291\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-551c290 elementor-widget elementor-widget-text-editor\" data-id=\"551c290\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<nav class=\"wdb-g-toc\" aria-label=\"Table of contents\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f6ad7bf elementor-widget elementor-widget-text-editor\" data-id=\"f6ad7bf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-card\"><h3>Planning a backup, DRP or BCP project?<\/h3><p>More than 20 years of experience protecting business data.<\/p><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-tel\" href=\"tel:+33972507828\">+33 9 72 50 78 28<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7069518 e-con-full wdb-g-cta e-flex e-con e-parent\" data-id=\"7069518\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-490b302 e-con-full wdb-g-cta-in e-flex e-con e-parent\" data-id=\"490b302\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-72d517e elementor-widget elementor-widget-text-editor\" data-id=\"72d517e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Protect your data with WeDoBack<\/h2><p>Encrypted offsite backup, immutable storage, DRP and BCP: tell us about your servers and we will recommend the right combination.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":32686,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"Data loss: is your business really protected? | WeDoBack","_seopress_titles_desc":"A business is protected if it can name its last successful restore test, the time taken, where the copies are and who holds the key.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/6\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/6\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":"","_members_access_role":[],"_members_access_error":""},"class_list":["post-32743","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/comments?post=32743"}],"version-history":[{"count":1,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32743\/revisions"}],"predecessor-version":[{"id":32882,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32743\/revisions\/32882"}],"up":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32686"}],"wp:attachment":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/media?parent=32743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}