Home / All services / Infrastructure
Backup & recovery
A backup that has never been restored isn't a backup. It's an assumption with a monthly cost.
In every audit we run, backups exist. In most, they have never been tested, they sit on the same network as the servers, and they use the same administrator credentials. Which means a single attack takes both.
Three things we always change
- Immutable copies that cannot be deleted even if someone gains administrator rights.
- Separation from the domain — the repository does not join Active Directory.
- A scheduled restore test, with a report that goes to you, not just to us.
RTO and RPO as numbers, not words
RTO is how long it takes to bring the system back; RPO is how much work you lose. Both should be set by you, based on what an hour of downtime costs — not by the vendor. We give you the cost of each level and you choose; then we build what you chose and prove it holds.
The recovery plan
A real plan says who makes the call, in what order systems come back, where the credentials are if the network is down, and how you notify customers. We write it with you and rehearse it at least once a year, because an unrehearsed plan is just a document.
Not sure where to start?
The audit puts the whole picture on paper within two weeks, at a fixed price. The report stays yours whatever you decide afterwards.