A dental practice in Sandy discovers their server crashed overnight. Patient records, billing data, appointment schedules — all gone. They have a backup drive sitting next to the server, but it turns out the backup job has been failing silently for three months. Nobody checked.

This is more common than you’d think. Having “a backup” and having a reliable, tested backup strategy are very different things.

Cloud Storage vs. Cloud Backup: They’re Not the Same Thing

This confusion trips up a lot of business owners. Let’s clarify:

Cloud storage (OneDrive, Google Drive, Dropbox) is a place to keep files and share them with your team. It syncs files across devices and provides collaboration features. But it’s not a backup — if you delete a file from OneDrive, it gets deleted from the cloud too. If ransomware encrypts your local files, those encrypted versions sync right up to the cloud.

Cloud backup (Veeam Cloud Connect, Datto, Acronis, Backblaze B2) is a separate, point-in-time copy of your data that exists independently of your production systems. It’s designed specifically for recovery — you can restore files, folders, or entire systems to a specific point in time before a problem occurred.

Most businesses need both: cloud storage for day-to-day collaboration, and cloud backup for disaster recovery. Using only one when you need both leaves a dangerous gap.

The 3-2-1 Backup Rule: Still the Gold Standard

The 3-2-1 rule has been around for decades because it works:

3 copies of your data. Your production data plus two backup copies. If any single copy fails — hardware failure, ransomware, accidental deletion — you have two more.

2 different media types. Don’t store all your backups on the same type of storage. If your production data is on a local server, keep one backup on a NAS or external drive and another in the cloud. Different failure modes mean they’re unlikely to fail simultaneously.

1 copy offsite. If a fire, flood, or theft destroys your office, your onsite backups go with it. At least one copy needs to be geographically separate — cloud backup is the most practical way to achieve this for most Utah businesses.

In 2025, many security professionals add a “1-0” to the rule: 1 immutable copy, 0 errors in recovery testing. Immutable backups can’t be modified or deleted even by an admin — critical for surviving ransomware attacks that specifically target backup systems.

What to Back Up (It’s More Than You Think)

When we audit backup strategies for Utah businesses, we consistently find gaps in what’s being protected:

Microsoft 365 data. Many businesses assume Microsoft backs up their email, SharePoint, and Teams data. They don’t — at least not in a way that lets you recover deleted items beyond a short retention window. You need a third-party M365 backup solution (Veeam for M365, Acronis, Barracuda) to protect this data.

Line-of-business applications. Your accounting software, CRM, EHR system, or industry-specific database often lives in its own silo. Make sure your backup covers these application databases, not just file shares.

Configurations and system state. Rebuilding a server from scratch — reinstalling the OS, applications, and configurations — can take days. Full system image backups let you restore an entire server to the exact state it was in before a failure, reducing recovery time from days to hours.

Endpoints. If your team stores work files on their laptops (and they do, regardless of policy), those files need to be backed up or synced to a protected location.

Choosing the Right Solution for Your Business

The right backup solution depends on your size, budget, compliance requirements, and recovery time objectives. Here’s how we typically advise Utah businesses:

1-20 employees, basic needs: Cloud backup service (Acronis or Backblaze) for endpoints and file servers, plus a dedicated M365 backup solution. Budget: $200-500/month.

20-100 employees, compliance needs: Hybrid backup with a local NAS/BDR appliance for fast local recovery plus cloud replication for disaster recovery. Solutions like Datto or Veeam with cloud connect. Budget: $500-1,500/month.

Any business handling regulated data (HIPAA, financial): Encrypted backups with configurable retention policies, audit logging, and immutable storage. Your backup solution needs to support compliance documentation and reporting.

The Most Important Step: Test Your Backups

A backup you haven’t tested is a backup you can’t trust. We’ve seen businesses discover their backups were corrupted, incomplete, or misconfigured only when they tried to restore during an actual emergency.

Monthly: Restore a random selection of files from backup and verify they’re intact and current.

Quarterly: Perform a full test restore of a critical system — your email server, your primary database, or your file server — to a test environment. Verify that applications work, data is complete, and the process takes less time than your recovery time objective.

Annually: Run a full disaster recovery drill. Simulate a complete office loss and practice recovering operations from backup. Document what worked, what didn’t, and what needs to change.

Build a Backup Strategy That Holds Up

At Brivy IT, we design and manage backup solutions for Utah businesses — from small offices running cloud-only backup to larger organizations with hybrid disaster recovery infrastructure. If you’re not confident your backups would survive a real emergency, reach out for a free backup assessment. We’ll review your current setup and identify exactly where the gaps are.