Many small businesses believe their files are backed up because they use a cloud drive. Usually they are synchronized, which is different. If a file is deleted, corrupted, or encrypted by ransomware on one device, synchronization can faithfully copy that damage everywhere. A real backup is an independent, restorable copy that survives the failure of the original. This article explains the concept without jargon and gives a plan you can follow.
Sync, version history, and backup compared
| Sync | Version history / trash | Backup | |
|---|---|---|---|
| Main purpose | Same files on multiple devices | Undo recent edits and deletions | Recover after loss or disaster |
| Protects against accidental deletion | No (deletion syncs) | Yes, for a limited time | Yes |
| Protects against ransomware | No | Sometimes, within limits | Yes, if the backup is isolated or immutable |
| Protects against losing the account | No | No | Yes, if stored independently |
See also Version History and File Recovery for the first two layers.
The 3-2-1 rule
A long-standing guideline for backups is 3-2-1:
- 3 copies of your data (the original plus two backups),
- 2 different types of storage (for example, an external drive and a cloud backup service),
- 1 copy stored off-site, away from the office, so a fire, theft, or flood does not destroy everything.
Some security professionals extend this with an additional copy that is offline or immutable (cannot be altered), which provides protection against ransomware that tries to encrypt backups too.
Step-by-step: build a simple backup plan
- Identify what matters. List the data you could not do business without: financial records, customer files, project documents, email archives, accounting data, and website content.
- Find where it lives. Include laptops, phones, cloud accounts, accounting software, and your website host. Data in software-as-a-service accounts is often your responsibility to export or back up; check your provider's documentation for what they do and do not retain.
- Choose backup methods. For example: an automatic cloud backup service for laptops, plus a periodically connected external drive stored off-site, plus scheduled exports from critical online tools.
- Automate. Backups that depend on remembering will be forgotten. Use scheduled or continuous backup.
- Protect the backups. Use a separate account or credentials for backup storage, with MFA, so an attacker who compromises a daily account cannot also delete backups. Encrypt backups that leave your control.
- Test restores. Once a quarter, restore a few files and one full folder to a different location, and confirm they open correctly. An untested backup is a hope, not a plan.
- Document it. Write down what is backed up, how often, where, who is responsible, and the steps to restore.
Deciding how often to back up
Ask: "If we lost everything since the last backup, how much work could we afford to redo?" This is your recovery point objective. If the answer is "one day," daily backups are enough. If the answer is "an hour," you need more frequent or continuous backups. Then ask how quickly you must be operational again, your recovery time objective, which influences whether you need a local backup for fast restores in addition to a cloud copy.
Common mistakes
- Keeping the external drive permanently plugged in, where ransomware can reach it.
- Never testing a restore.
- Backing up only the computers and forgetting cloud accounts and website data.
- Storing the only off-site copy in an employee's home without clear arrangements.
- Using the same password for backups and everyday accounts.
Advantages and limitations
Advantages
- Resilience against deletion, device loss, ransomware, and disasters.
- Peace of mind and faster recovery.
- Often inexpensive relative to the cost of lost data.
Limitations
- Requires initial setup and periodic verification.
- Cloud backup of large data volumes may be slow initially.
- Backups of regulated data may carry compliance requirements; seek professional advice where relevant.
Conclusion
Sync is convenience; backup is insurance. Aim for three copies on two kinds of storage with one off-site, automate it, protect it, and test it. Add this to the rest of your protections in the Workplace Security Checklist, and tidy the data you are protecting with the advice in Digital Organization for Small Businesses.
Independent and educational. This article is general information, not professional, legal, or technical-support advice. Workplace Productivity Hub is not affiliated with any software vendor. Features, menu names, and limits vary by product and plan and change over time, so confirm details in your own tools' official documentation. See our editorial standards and corrections policy.