Ask a business owner whether they have backups and you’ll almost always get a confident yes. Ask when someone last restored from one, and the room goes quiet.
That gap is where the real risk lives. Backing up is a task your software does automatically. Restoring is a skill your business either has or doesn’t — and most discover which one they are on the worst possible day.
Here’s how to find out now, while the answer is still cheap.
A Backup Is a Promise, Not a Guarantee
Every backup system makes the same claim: your data is safe. But that claim is untested until someone actually pulls a file back out.
Backups fail quietly. A job silently stops running after a server update. A new folder never gets added to the backup scope. The drive fills up and jobs start skipping. The software emails alerts to someone who left the company in 2023.
None of these announce themselves. Everything looks fine right up until you need it, which is the whole problem.
Two Terms Worth Knowing
Your IT provider will use these, and they’re simpler than they sound.
RTO — Recovery Time Objective. How long you can survive without the system. If your practice management software dies at 9 AM Tuesday, are you open at noon? Wednesday? Next week?
RPO — Recovery Point Objective. How much recent work you can afford to lose. Nightly backups mean up to a full day of work vanishes. For an accounting firm in March, that could be a very expensive day.
Most owners have never been asked either question. They have whatever numbers their backup happened to come with — which may be wildly wrong for how the business actually runs.
Your Cloud Sync Is Not a Backup
This one catches good businesses constantly.
OneDrive, SharePoint, Google Drive, and Dropbox are sync tools. They mirror what’s on your computer. That’s genuinely useful — but it means they faithfully copy your mistakes too.
Delete a folder and it disappears everywhere. Ransomware encrypts your files and sync dutifully pushes the encrypted versions to the cloud, overwriting the good copies. An employee overwrites a spreadsheet and the old one is gone.
Yes, these services keep version history and a recycle bin. Those windows are short, they’re limited, and recovering hundreds of files one at a time during a crisis is not a recovery plan.
Sync protects you from a dead laptop. Backup protects you from a bad decision.
The Test You Can Run This Month
You don’t need technical knowledge for this. You need to ask, and then watch what happens.
Pick a real file — something from a shared drive, ideally a few weeks old. Ask whoever manages your IT to restore it from backup to a separate folder. Then note three things:
How long did it take? Minutes is healthy. Days means your recovery plan has a problem nobody has noticed yet.
Did they have to restore everything to get one file? If pulling back a single document requires recovering an entire server, your RTO in a real emergency is far worse than anyone assumes.
Did the file actually open? Corrupted backups are real. A file that restores but won’t open is not a recovery.
That’s the whole test. One file, one afternoon, and you learn more about your resilience than any status dashboard will tell you.
Five Questions to Ask Your IT Provider
Send these in an email. Good providers answer them in a day.
1. When did our last successful backup complete, and how do we know? The answer should be a specific date and time, not “they run nightly.”
2. Is anything backed up offsite or offline? A backup sitting on a drive in the same building is a fire and ransomware problem. Modern ransomware hunts for connected backups first.
3. What exactly is covered? Servers, workstations, Microsoft 365 mailboxes, SharePoint, line-of-business databases? Cloud data especially gets assumed and rarely gets covered.
4. When was the last restore test, and what were the results? If nobody can answer this, that’s your finding right there.
5. If our main server died tonight, what’s the realistic timeline to working again? You want a number, and you want to know whether that number is survivable.
What Good Actually Looks Like
Solid backup protection isn’t complicated. Multiple copies, at least one offsite, at least one that ransomware cannot reach, and restores tested on a schedule rather than during a crisis.
The businesses that recover well aren’t the ones with the most expensive tools. They’re the ones who found their gaps on an ordinary Tuesday instead of during an emergency.
Find Out on a Good Day
We’ve walked into plenty of situations around Castle Rock and the Denver metro where the backups had been failing for months and nobody knew — because nothing had forced anyone to look.
The test costs you one file and one afternoon. Not running it costs whatever your business is worth per day of downtime.
If you’d like someone to run a genuine restore test and give you a straight answer about where you stand, get in touch with Castle Rock Sky. We’ll tell you what actually works, what doesn’t, and what it would take to fix — before you need it.
