Backup and Disaster Recovery in Reno

Backup and disaster recovery means keeping safe copies of your business files, servers and Microsoft 365 data, plus a tested plan for getting back to work after a hardware failure, ransomware or a disaster. Computer Services Reno sets up, monitors and test-restores backups for businesses in Reno, Sparks and Carson City.

What is the difference between backup and disaster recovery?

A backup is a copy of your data. Disaster recovery is the plan and the tooling to turn that copy back into a working office. You can have backups and still be down for a long time if nobody has worked out how to restore them, onto what, and in which order.

Data backup vs disaster recovery
QuestionData backupDisaster recovery
What it isCopies of files, servers and cloud dataA plan and setup to restore systems and resume work
Question it answersDo we still have the data?How do we get working again, and how soon?
Measured byRecovery point objective (RPO)Recovery time objective (RTO)
Typical useA deleted folder, a corrupted spreadsheetA dead server, ransomware, a flooded office
Tested byRestoring sample filesRestoring whole systems and timing it
Who decides prioritiesMostly technicalThe business, with IT advice

What is the 3-2-1 backup rule?

The 3-2-1 rule is the standard starting point for business backup solutions: keep three copies of your data, on two different types of storage, with one copy off-site. A server, a local backup device and a cloud copy is a common way to meet it.

Ransomware has added a refinement. Many businesses now make one copy immutable or offline, so it cannot be changed or deleted from the main network even with stolen admin credentials, and they check that backups complete without errors. You may see this written as 3-2-1-1-0.

Does your backup meet the basics?

  • Three copies of the data that matters, including the original
  • Two kinds of storage, so one failure type cannot take both
  • One copy off-site, out of reach of a fire or flood at the office
  • One copy that cannot be altered from your everyday network
  • Backups encrypted, with MFA on the backup console
  • Failed backup jobs alerted and followed up, not ignored
  • A restore tested recently, with the date written down
Illustration of the 3-2-1 backup rule: three copies of data, on two types of storage, with one copy off-siteOriginal dataLocal backupdifferent mediaOff-site copycloud or other site3copies of your data2types of storage1copy off-site
Illustrative: the 3-2-1 backup rule.

How should a small business define RPO and RTO?

Two numbers turn "we need backups" into a plan you can test. They are business decisions first and technical settings second.

Recovery point objective (RPO)

How much recent work you can afford to lose, measured in time. A nightly backup means up to a day of work could be gone. An accounting firm in tax season may want copies every hour or two; a file share that changes little may be fine with daily.

Recovery time objective (RTO)

How long a system can be down before the cost becomes serious. A dental office that cannot see its schedule or patient charts has a short RTO for that software. An archive of old projects can wait. Short RTOs need more preparation, and they cost more.

Setting these for each key system is part of planning with IT consulting. Servers that hold the most important data are covered by server support and maintenance, which looks after the health of the servers themselves.

Does Microsoft 365 need its own backup?

Usually, yes. Microsoft keeps its service running and protects its data centers, but under its shared responsibility model, protecting your content is largely up to you. Deleted emails and files are kept only for limited retention periods, and a deletion or ransomware change that syncs through OneDrive or SharePoint can spread before anyone notices.

A separate Microsoft 365 backup keeps copies of mailboxes, OneDrive, SharePoint and Teams data outside the account, so you can restore a mailbox for a departed employee, a folder someone wiped or files encrypted through a synced laptop. Account settings and licensing sit with Microsoft 365 support.

How do you know a backup will restore?

A backup that has never been restored is a hope, not a plan. Testing on a schedule catches the backup that silently stopped, the drive that was never included, and the password nobody can find.

  1. Check the reports

    Review backup job results and follow up on failures and warnings, so a gap does not run for months.

  2. Restore sample files

    Pull back individual files and emails from different dates to confirm the data is readable and complete.

  3. Restore a whole system

    Bring a server or workstation back in a test environment, separate from your live network, and confirm it starts and works.

  4. Time it and write it down

    Record how long the restore took and compare it with the RTO you set. If it is too slow, change the setup, not the target.

Can backups help a business recover from ransomware?

They give you options. Verizon's 2025 Data Breach Investigations Report put the median ransom paid at $115,000, and found that 64% of ransomware victims did not pay.1 A business with clean, separate, tested backups is in a far better position to be one of them. Backups do not undo a data theft or remove the attacker, so restoring goes hand in hand with cleanup and small business cybersecurity controls.

What to avoid: backups reachable with the same admin password as everything else, a backup drive left plugged into the server, and cloud backups without MFA.

$115,000
median ransom paid (Verizon DBIR 2025)1
64%
of ransomware victims did not pay (Verizon DBIR 2025)1
64 percent of ransomware victims did not pay the ransom (Verizon 2025 DBIR)Did not pay the ransomransomware victims64%
Share of ransomware victims that did not pay; the median ransom paid was $115,000. Source: Verizon, 2025 Data Breach Investigations Report.

What is a disaster recovery plan?

A disaster recovery plan is a short document that says what gets restored, in what order, by whom and from where. It should be readable by someone under stress, and stored somewhere you can reach if your own systems are down. Most small business plans include:

  • A list of key systems with an RPO and RTO for each
  • Where each backup lives and how to reach it
  • The restore order, starting with what staff need first
  • Who makes decisions and who to call, inside and outside the business
  • How staff will work if the office is unusable
  • When the plan was last tested and updated

What about data recovery from a failed drive?

If a computer's drive has failed and there is no backup, recovery may still be possible, sometimes from a drive that still responds and sometimes only through a specialist lab. It is never certain, and it costs far more than a backup would have. We will tell you honestly what the options look like. See business computer repair for failing computers.

Backup monitoring is part of managed IT services, quoted at one flat monthly price with no contract. See managed IT pricing, or book a free on-site IT assessment and we will look at your backups with you.

For a short checklist you can run yourself, see our guides.

Backup and disaster recovery FAQ

Often enough that losing everything since the last backup would be tolerable. For many offices that means at least daily for files and servers, and more often for systems that change all day, such as accounting or practice management databases. Cloud services like Microsoft 365 should be backed up on their own schedule as well.
Long enough to go back to before a problem was noticed. Ransomware and accidental deletions are sometimes found weeks later, so a mix of recent daily copies and older weekly or monthly copies is common. Industry rules and contracts may set longer retention for some records; check those with your advisor.
Disaster recovery as a service is a cloud-based setup where copies of your servers are kept ready to start in a provider's data center. If your own server or office is unavailable, those copies can be started there so staff can keep working. It costs more than plain backup, so it suits systems the business cannot run without.
A business continuity plan covers how the whole business keeps operating during a disruption: people, premises, suppliers and communication. Disaster recovery is the IT part of that plan, covering how systems and data are restored and in what order. Both should use the same priorities.
It can be, when backups are encrypted in transit and at rest, access to the backup console is protected with multi-factor sign-in, and the provider's terms fit your obligations. Medical offices also need a business associate agreement with anyone who handles patient data; we sign HIPAA BAAs.

See where your IT stands, at your office.

Book a free on-site IT assessment. A local technician comes to you, looks at your setup, and gives you a plain-English list of what to fix first. No cost, no contract.