{"id":31887,"date":"2026-10-06T22:10:39","date_gmt":"2026-10-06T20:10:39","guid":{"rendered":"https:\/\/www.wedoback.com\/?page_id=31887"},"modified":"2026-10-07T11:00:20","modified_gmt":"2026-10-07T09:00:20","slug":"is-your-business-really-protected","status":"publish","type":"page","link":"https:\/\/www.wedoback.com\/en\/guides\/backup\/is-your-business-really-protected\/","title":{"rendered":"How can you tell whether a business is really protected against data loss?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"31887\" class=\"elementor elementor-31887 elementor-31588\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3433d93 e-con-full wdb-g e-flex e-con e-parent\" data-id=\"3433d93\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-a38e6a7 e-con-full wdb-g-hero e-flex e-con e-parent\" data-id=\"a38e6a7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-f340944 e-con-full wdb-g-hero-in e-flex e-con e-parent\" data-id=\"f340944\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-57ec7f9 elementor-widget elementor-widget-text-editor\" data-id=\"57ec7f9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/backup\/\">IT backup<\/a><\/p><p class=\"wdb-g-pill\" style=\"--pill:#01adb9\">IT backup<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-56e5894 elementor-widget elementor-widget-heading\" data-id=\"56e5894\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">How can you tell whether a business is really protected against data loss?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e135513 elementor-widget elementor-widget-text-editor\" data-id=\"e135513\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-lead\">A business is really protected if, for the systems that keep it running, it can show a recent successful restore, a copy that does not share the fate of the server, and a person able to do it again without improvising. The volume purchased, the software logo or the phrase \u201cwe are backed up\u201d are not enough to conclude.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6bd6003 elementor-widget elementor-widget-text-editor\" data-id=\"6bd6003\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>3 min<\/b> read<\/span><span><b>6<\/b> sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3c48ae4 e-con-full wdb-g-body e-flex e-con e-parent\" data-id=\"3c48ae4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-4fb8042 e-con-full wdb-g-grid e-flex e-con e-parent\" data-id=\"4fb8042\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-917fa01 e-con-full wdb-g-article e-flex e-con e-parent\" data-id=\"917fa01\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f50fdcd elementor-widget elementor-widget-text-editor\" data-id=\"f50fdcd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-key\"><h2>Key points<\/h2><ul><li>Protection is assessed <strong>on a defined scope<\/strong>: the short list of systems without which the business stops.<\/li><li>Nine questions are enough; <strong>a vague answer counts as a no<\/strong>.<\/li><li>If an everyday administrator account can erase a copy, <strong>so can ransomware<\/strong>.<\/li><li>More than <strong>twelve months without a restore test<\/strong>: protection is just an assumption.<\/li><li>Insurers and auditors mainly ask for <strong>the report of the last test<\/strong>, not the product name.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d248bad elementor-widget elementor-widget-text-editor\" data-id=\"d248bad\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>The questions that settle it<\/h2><p>Ask them of management and of the person who administers the systems. Vague answers count as a no.<\/p><ol><li><strong>Which systems, if lost tonight, would stop the business tomorrow?<\/strong> Without a short list, protection has no scope. Cybermalveillance.gouv.fr, the French government&#8217;s cybercrime assistance platform, starts with exactly this: identifying the devices and data to back up.<\/li><li><strong>When was the last successful backup of each one?<\/strong> \u201cNormally last night\u201d is not a date. A screen or an alert email is.<\/li><li><strong>Where is the copy if the building burns down?<\/strong> Same room, same administration network, or another location. The CNIL, France&#8217;s data protection authority, recommends at least one backup at a geographically separate site.<\/li><li><strong>Can an everyday administrator account erase this copy?<\/strong> If so, ransomware can too. The ANSSI, France&#8217;s national cybersecurity agency, calls for dedicated backup accounts and at least one offline copy.<\/li><li><strong>When did you last carry out a real restore, of what, and how long did it take?<\/strong> More than twelve months without a test: protection is just an assumption.<\/li><li><strong>Who has the encryption key and the instructions if that person is on leave?<\/strong> A single key in one employee&#8217;s head is a point of failure. The ANSSI recommends defining who holds the keys, where they are stored and how they are backed up.<\/li><li><strong>What downtime does management accept, and did the last restore fit within it?<\/strong> Otherwise the RTO is just a wish.<\/li><li><strong>Is cloud email within scope?<\/strong> Many businesses protect the file server and forget <a href=\"\/en\/guides\/backup\/how-to-back-up-microsoft-365\/\">Microsoft 365<\/a> or <a href=\"\/en\/guides\/backup\/how-to-back-up-google-workspace\/\">Google Workspace<\/a>, where the real work is done.<\/li><li><strong>What happens at the weekend?<\/strong> An alert that is only read on Monday delays the discovery of a failure accordingly.<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2f1c9da elementor-widget elementor-widget-text-editor\" data-id=\"2f1c9da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>A simple score<\/h2><table><thead><tr><th>Answer<\/th><th>Interpretation<\/th><\/tr><\/thead><tbody><tr><td>List of systems, off-site copy, immutable or offline, test less than twelve months old, two capable people<\/td><td>Real protection on the listed scope<\/td><\/tr><tr><td>Software in place, green logs, no tests, copy on the local NAS<\/td><td>Protection against a minor disk failure only<\/td><\/tr><tr><td>\u201cThe provider takes care of it\u201d, with no contractual response time or test<\/td><td>Protection not verified<\/td><\/tr><tr><td>No copy of cloud email<\/td><td>A gap in the main work tool<\/td><\/tr><\/tbody><\/table><p>Protection always applies <strong>to a defined scope<\/strong>. An SME can be very well protected for its ERP and completely exposed on two sales reps&#8217; laptops. Saying so is more useful than an overall percentage.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9d1a311 elementor-widget elementor-widget-text-editor\" data-id=\"9d1a311\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What an external audit also looks at<\/h2><p>Cyber insurers and auditors generally ask for the same evidence: architecture of the copies, retention period, result of the last test, management of access to the console, and the incident procedure. They rarely ask for the product name. They ask for the report of the last test.<\/p><p>The incident procedure must also cover the formalities: in France, since 2023, compensation by an insurer for a cyberattack requires a complaint to be filed with the authorities within 72 hours of discovering the attack.<\/p><p>For businesses within the scope of the European NIS 2 Directive, this is no longer just a matter of good practice: Article 21 lists business continuity, backup management and business recovery among the risk management measures to be put in place.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0c7f438 elementor-widget elementor-widget-text-editor\" data-id=\"0c7f438\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-brand\"><h2>At WeDoBack<\/h2><p>The service provides the encrypted off-site copy, on servers dedicated to backup and replicated in several European countries, and 24\/7 backup monitoring with an alert in the event of failure. If subscribed, it adds <a href=\"\/en\/immutable-offer\/\">immutability<\/a>, restart on standby instances (<a href=\"\/en\/drp-offer\/\">DRP<\/a>) or takeover by continuously running instances (<a href=\"\/en\/bcp-offer\/\">BCP<\/a>). It does not replace answers 1, 5 and 6: the scope, the test and safekeeping of the key remain the customer&#8217;s responsibility. <a href=\"\/en\/integral-offer\/\">INTEGRAL<\/a> includes two hours of support per month to help with these tasks. <a href=\"\/en\/smart-offer\/\">SMART<\/a> leaves operations to the customer and bills support per intervention. Support can be reached on +33 9 72 50 78 28 from 9:00 to 13:00 and from 14:00 to 17:30 (Paris time). In any case, a business that has never carried out a restore is not \u201cprotected by WeDoBack\u201d. It has a subscription.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/contact\/\">Contact us<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-23c344e elementor-widget elementor-widget-text-editor\" data-id=\"23c344e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-faq\"><h2>Frequently asked questions<\/h2><details><summary>Is having an IT service provider enough to be protected?<\/summary><p>No, not in itself. Check what the contract actually provides for: scope backed up, location of copies, retention period, restore tests, response time. Ask for the report of the last test. Without these elements, protection has not been verified.<\/p><\/details><details><summary>Is my business covered by NIS 2?<\/summary><p>The European NIS 2 Directive targets essential and important entities in many sectors, depending on their size and activity. For those concerned, it explicitly lists backup management and business recovery among the mandatory security measures. Even if you fall outside its scope, its list is a good benchmark.<\/p><\/details><details><summary>Where should you start if the answers are poor?<\/summary><p>With the list of critical systems, then a test restore of the most important one. This first test almost always reveals the real gaps: missing copy, key that cannot be found, time that is too long. You then fix them in that order.<\/p><\/details><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ca90948 elementor-widget elementor-widget-text-editor\" data-id=\"ca90948\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"wdb-g-related\"><a href=\"\/en\/guides\/backup\/how-to-test-a-backup\/\"><small>IT backup<\/small>How do you test that a backup works?<\/a><a href=\"\/en\/guides\/backup\/backup-strategy-for-an-sme\/\"><small>IT backup<\/small>What backup strategy for an SME?<\/a><a href=\"\/en\/guides\/drp-bcp\/how-to-set-your-rto\/\"><small>DRP and BCP<\/small>How do you determine your RTO?<\/a><a href=\"\/en\/guides\/backup\/protect-backups-from-ransomware\/\"><small>IT backup<\/small>How do you protect your backups against ransomware?<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e517e68 elementor-widget elementor-widget-text-editor\" data-id=\"e517e68\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-sources\"><h2>Sources<\/h2><p class=\"wdb-g-src-date\">Documents consulted in October 2026.<\/p><ol><li><a href=\"https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi_fondamentaux_sauvegarde_systemes_dinformation_v1.1.pdf\" target=\"_blank\" rel=\"noopener\">Backing up information systems \u2013 The fundamentals (ANSSI-BP-100, v1.1, 27 November 2025)<\/a> \u2014 ANSSI<\/li><li><a href=\"https:\/\/www.cnil.fr\/fr\/securite-sauvegarder\" target=\"_blank\" rel=\"noopener\">Security: Backing up<\/a> \u2014 CNIL<\/li><li><a href=\"https:\/\/www.cybermalveillance.gouv.fr\/medias\/2019\/11\/240711_FichePratique_Sauvegardes_SCREEN.pdf\" target=\"_blank\" rel=\"noopener\">Backups: adopting good practices<\/a> \u2014 Cybermalveillance.gouv.fr<\/li><li><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/FR\/TXT\/PDF\/?uri=CELEX:32022L2555\" target=\"_blank\" rel=\"noopener\">Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS 2)<\/a> \u2014 EUR-Lex<\/li><li><a href=\"https:\/\/entreprendre.service-public.gouv.fr\/actualites\/A16531\" target=\"_blank\" rel=\"noopener\">Cyberattack during a business activity: compensation subject to filing a complaint within 72 hours<\/a> \u2014 Entreprendre.Service-Public.gouv.fr<\/li><li><a href=\"https:\/\/www.wedoback.com\/offres-et-tarifs\/\" target=\"_blank\" rel=\"noopener\">Offers and prices<\/a> \u2014 WeDoBack<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2599032 e-con-full wdb-g-aside e-flex e-con e-parent\" data-id=\"2599032\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8986ec3 elementor-widget elementor-widget-text-editor\" data-id=\"8986ec3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<nav class=\"wdb-g-toc\" aria-label=\"Table of contents\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19e7c51 elementor-widget elementor-widget-text-editor\" data-id=\"19e7c51\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-card\"><h3>Planning a backup, DRP or BCP project?<\/h3><p>More than 20 years of experience protecting business data.<\/p><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-tel\" href=\"tel:+33972507828\">+33 9 72 50 78 28<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ca4185f e-con-full wdb-g-cta e-flex e-con e-parent\" data-id=\"ca4185f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-4d57044 e-con-full wdb-g-cta-in e-flex e-con e-parent\" data-id=\"4d57044\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9c5e526 elementor-widget elementor-widget-text-editor\" data-id=\"9c5e526\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Protect your data with WeDoBack<\/h2><p>Encrypted offsite backup, immutable storage, DRP and BCP: tell us about your servers and we will recommend the right combination.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":31776,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"Data loss: is your business really protected? | WeDoBack","_seopress_titles_desc":"A business is protected if it can name its last successful restore test, the time taken, where the copies are and who holds the key.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":"","_members_access_role":[],"_members_access_error":""},"class_list":["post-31887","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/www.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31887","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wedoback.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.wedoback.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.wedoback.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wedoback.com\/en\/wp-json\/wp\/v2\/comments?post=31887"}],"version-history":[{"count":1,"href":"https:\/\/www.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31887\/revisions"}],"predecessor-version":[{"id":32204,"href":"https:\/\/www.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31887\/revisions\/32204"}],"up":[{"embeddable":true,"href":"https:\/\/www.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31776"}],"wp:attachment":[{"href":"https:\/\/www.wedoback.com\/en\/wp-json\/wp\/v2\/media?parent=31887"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}