We use OneDrive or Google Drive. Isn’t that a backup?
Not on its own. Those services keep your files in sync, so a file deleted or damaged on one computer can be deleted or damaged on the others too. Recovery windows are limited: Google, for example, says an administrator can recover Drive files for 25 days after a user empties their trash, and after that they can’t be recovered that way. A separate backup keeps older copies you control.
What does “can’t be changed or deleted” mean?
Many backup services can lock copies for a set time, so nobody can alter or delete them until that time is up. That helps if an attacker gets into your systems. We set it up where your backup service supports it, and check that it’s on. If it doesn’t, we tell you and suggest an option that does.
How often do you test a restore?
Every quarter, we restore real files and a mailbox and record the result. Full restores of a computer or server can be added on a schedule we agree with you.
Does HIPAA require this?
For practices covered by HIPAA, the Security Rule requires a data backup plan and a disaster recovery plan. Testing those plans is listed as “addressable”, which means you either do it or write down why an equivalent alternative is reasonable. We help with the technical records; your compliance advisor can explain how the rules apply to your practice.
What about hurricanes?
If your only copy is in your office, a storm or a long power outage can leave it out of reach along with everything else. We keep an encrypted copy away from your office, outside Florida if you want, in a location we agree with you.
Do I have to replace my IT company?
No. We can work alongside your IT company, check what they’ve set up, and add the testing and the reports.
What does it cost?
The check-up is quoted after the free check, then there’s one monthly plan. The price depends on how many people, computers and mailboxes you have and how much data you keep. You get the price in writing before you pay anything.