Most small companies know backups matter. Very few have a written plan. The difference shows up on the bad day: a file deleted by accident, a failed drive, or ransomware locking everything at once. A simple plan does not need a big budget. It needs clear decisions and fixed dates.
Do not back up everything. Sit with your team and list the files that stop work if they disappear. Usually that is: accounting files, client contracts, project files, product photos, the website database, and credentials stored in an encrypted vault.
The operating system and installed software can be reinstalled. Focus on the data you cannot recreate.
The familiar rule: three copies of your data, on two different kinds of media, with one copy off-site. For a small office that means a copy on the machine, a copy on an external drive or in-house server, and a copy in the cloud.
Files that change daily, like accounting, get a daily copy. Designs and photos are fine on a weekly copy. Files that rarely change can be copied monthly. The point is not a perfect schedule; it is that the schedule is fixed and does not depend on someone remembering.
Cloud storage protects you from fire, theft, or a dead drive, but not from an internet outage. A local drive is fast and cheap for restoring a large file, but it can fail and it is easy to delete from by mistake. Use both: the local copy for quick recovery, the cloud copy for the big incidents.
One detail matters for ransomware. Do not mount your cloud backup as a network drive under an always-open account. Prefer read-only access or versioned backups, so that even if local files are encrypted the stored copies stay clean. Also watch who can delete backups. In most small companies, lost data comes from an internal account or human error more often than from an outside attack.
A backup nobody restored from is not protection, it is hope. Once every three months, pick a file from the backup, restore it to a different machine, and open it. Check the size, the date, and whether a database actually loads. Finding a broken restore now is far cheaper than finding it during an emergency.
Record the result in one place: date, file restored, and who did it. That single habit keeps the plan alive and stops the business from depending on one person.
Keep it small. Write the plan on one page, name the owner of each step, and put it in the calendar. At q8dm we usually tell clients to start with these plain steps before moving to anything bigger. If you want help organising your data or choosing a setup that fits, reach us at q8dm.com and we will work through it with you.