Cyber Insurance and Backups
Why Recovery Evidence Matters
Having backups is not the same as being able to recover. Cyber insurance forms may ask whether your critical data is backed up, stored separately from your live systems and tested to make sure it can be recovered. We help small businesses check what is actually backed up, where it is stored, how quickly it could be restored and what evidence you can show before you tick the box.
Having backups is not the same as being able to recover.
Cyber insurance forms may ask whether your critical data is backed up, stored separately from your live systems and tested to make sure it can be recovered.
We help small businesses check what is actually backed up, where it is stored, how quickly it could be restored and what evidence you can show before you tick the box.
A backup only matters if you can restore the right data at the right time.
Microsoft 365 resilience is useful, but it is not the same as a separate backup you control.
If your insurer, broker or client asks, “we think so” is not much of an answer.
Why recovery evidence matters for cyber insurance
Cyber insurance can help after an incident, but the insurer still needs to understand the risk they are taking on. Backups are a big part of that picture because ransomware, accidental deletion, account compromise and system failure can all become business problems very quickly.
Insurers may ask about backup location
Some questions focus on whether critical data is backed up to a separate, cold or offline location that would not be affected by a problem in the live environment.
They may ask about recovery testing
Having a backup product is one thing. Testing whether data can actually be restored is where the answer becomes more meaningful.
They may care about critical data
Email, files, finance data, client records, case notes, school data, care records and operational systems may all need different recovery thinking.
The question is not just “do you have backups?”
The better question is: if your emails, files or systems disappeared tomorrow, what could you recover, how long would it take, and what proof do you have that the restore would work?
Where small businesses often get caught out
Most backup gaps are not caused by laziness. They happen because systems grow over time and nobody stops to check what is protected, what is assumed, and what would actually happen during a bad day.
“Microsoft backs everything up”
Microsoft 365 has resilience built in, but that does not mean you have a separate backup for deleted, corrupted, encrypted or compromised data.
“Our files are in OneDrive”
OneDrive and SharePoint are excellent working tools, but sync is not the same as backup. Mistakes, deletion and compromise can still spread.
“The server backs up every night”
That sounds good, but where is the backup stored? Is it separate? Is it protected with MFA? Has anyone tested a restore recently?
“We would just restore everything”
Recovery usually needs priorities. Email first? Accounts system first? Client files? Line-of-business system? Without a plan, downtime grows.
“The backup says successful”
A successful backup job does not always prove a successful restore. Recovery testing gives you better evidence.
“Our IT provider handles that”
They might. The safer route is to ask for evidence: what is backed up, how often, where it is stored, and when it was last restored.
What good backup readiness usually includes
You do not need a huge enterprise disaster recovery project. You do need a practical backup setup that protects the right data and gives you confidence that recovery is possible.
Separate backup copies
Backups should not rely only on the same live systems, same accounts or same location that could be affected by the incident.
Microsoft 365 backup
Email, OneDrive, SharePoint and Teams data should be considered properly, not assumed to be fully recoverable by default.
Server and endpoint backup
For some businesses, critical data still lives on servers, desktops, laptops or line-of-business systems.
Restore testing
Testing helps confirm that data can be recovered, not just that a backup job ran successfully.
Recovery priorities
You should know which systems need to come back first and what downtime would mean for your business.
Useful evidence
Keep records of backup status, protected systems, restore tests and any improvement actions taken.
A simple way to check your backup position
Start with the insurance question, then work backwards. What are you being asked? What do you actually have? What can you prove?
Review
We look at the cyber insurance question and the systems your business depends on.
Check
We check what is backed up, how often, where it is stored and how access is protected.
Test
We help confirm whether recovery is possible and where restore evidence is missing.
Improve
You get practical next steps for Microsoft 365, servers, endpoints or business-critical data.
Backup and recovery options we can help with
Different businesses need different backup setups. Some mainly need Microsoft 365 protection. Others need server, endpoint or full business continuity backup. We help you choose what fits your risk, budget and insurance evidence needs.
ConnectWise Cloud Backup
Backup for Microsoft 365 environments, including key cloud data that small businesses often assume is already fully protected.
View ConnectWise Cloud BackupAxcient backup and recovery
Backup and recovery support for businesses that need stronger protection for servers, endpoints and operational systems.
View Axcient backup supportProduct choice comes second.
The first step is understanding what needs protecting, what your insurer is asking, what your business could not afford to lose and what evidence you need to keep.
What evidence might be useful?
The exact evidence depends on your insurer, broker, policy and business. These are the kinds of proof points that can make backup conversations clearer.
Who this is for
This page is for small businesses that need a practical backup answer, not vague reassurance.
This is for you if...
Your broker, insurer, client or tender has asked whether data is backed up, recoverable, stored offline or protected from ransomware.
This is not for you if...
You want to tick “yes” without checking what is actually backed up, where it lives or whether it can be restored.
Why Black Swan?
Black Swan Cyber Security Solutions helps small businesses turn cyber insurance questions into practical cyber security actions.
We are not here to frighten you or sell you the biggest backup package we can find. We help you understand the risk, choose sensible protection and keep useful evidence for insurance, clients and compliance.
- Plain-English backup and recovery advice
- Support for Microsoft 365, servers, endpoints and critical business data
- Recovery testing and evidence-led conversations
- Cyber insurance readiness support for small businesses
- Local support across Chesterfield, Derbyshire, Sheffield and South Yorkshire
Related cyber insurance support
Backups are one part of the wider cyber insurance picture. These pages go deeper into the other areas insurers may ask about.
Immutable backups and cyber insurance
Find out what immutable backups mean, what does not qualify, and the questions to ask before you tick yes on a renewal form.
Read moreCyber Insurance Readiness
Start here if you want to check MFA, backups, patching, training, remote access and evidence before you tick yes.
Read moreCyber insurance questions explained
A plain-English guide to the common questions small businesses are asked.
Read moreCyber insurance and staff training
Why phishing training, staff awareness and social engineering controls still matter.
Read moreCyber insurance and backup FAQs
Practical answers for business owners, office managers and anyone trying to answer a backup question on an insurance form.
Do cyber insurers ask about backups?
Some do. They may ask whether critical data is backed up, whether backups are stored separately or offline, and whether backups are tested to make sure they are recoverable.
Does Microsoft 365 count as a backup?
Microsoft 365 has resilience built in, but that is not the same as a separate backup. If emails, SharePoint files or OneDrive data are deleted, corrupted or encrypted, a dedicated Microsoft 365 backup can give you a clearer recovery route.
What is a cold or offline backup?
A cold or offline backup is a copy that is separated from the live environment, so the same incident is less likely to affect both the live data and the backup copy.
Why does restore testing matter?
A backup job can say it completed successfully, but that does not always prove the business can recover what it needs. Restore testing gives you better evidence that the backup can be used.
How often should we test backups?
It depends on your business, systems and risk. At minimum, you should have a sensible schedule and keep records of what was tested, when it was tested and whether the restore worked.
Can backups help with ransomware?
Yes, but only if the backups are protected, separate and recoverable. If ransomware can reach or delete the backup, recovery becomes much harder.
Can you help us prove backups are in place?
Yes. We can help review backup scope, backup status, access protection, restore testing and the evidence you may need for cyber insurance or client requirements.
Do you sell cyber insurance?
No. We provide cyber security, backup readiness and evidence-led support. We do not sell insurance or advise on policy terms.
Been asked whether your backups are recoverable?
Do not guess. We can help you check what is backed up, where it is stored, whether Microsoft 365 is protected and what evidence you have before you answer.
Book a Backup Readiness Check
Meet Kevin: Founder of Black Swan
Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you!
From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.
Ready to replace sleepless nights with peace of mind? It all starts with an informal chat!
Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.