Backup Assessment
AS reviews what is protected, where the copies live, who can delete them, and whether a restore actually works — then tells you plainly what to change.
When you need this
- Backup ownership changed hands or was outsourced
- Backups include some servers but nobody is sure which
- Retention doesn't match legal or operational needs
- Cloud or SaaS data (Microsoft 365, Google Workspace) assumed to be backed up
- Preparing for a cyber-insurance renewal
What we do
Coverage review
Every server, VM, database, endpoint set and SaaS service checked against the backup scope.
Isolation review
Whether an attacker with domain admin could delete or encrypt the backups.
Restore testing
Sample restores at file, database and system level, timed and documented.
Report
Findings ranked by risk with proportionate recommendations.
How it works
- Step 1
Assess
Understand the environment, the risks that matter and what a disruption would actually cost.
- Step 2
Protect
Put the right backups, isolation and safeguards in place — and verify they work.
- Step 3
Recover
When something fails, recover data from the safest, most complete sources first.
- Step 4
Restore
Bring services back in business-priority order on clean, trusted infrastructure.
- Step 5
Validate
Confirm data integrity, application function and that the cause has been dealt with.
- Step 6
Improve
Close the gaps the incident exposed and update the plan.
What affects the outcome
Outcomes are never guaranteed. Every case is assessed on its own condition, and we tell you what is realistic before you commit.
- Whether backups exist, are complete and were verified before the incident
- How isolated backups and snapshots were from the systems that failed
- Documentation of the environment: dependencies, credentials, configurations
- Time since the incident and what has been changed since
- Availability of clean infrastructure to restore onto
Frequently asked questions
Is Microsoft 365 backed up by Microsoft?
Microsoft provides resilience and limited retention, not a backup you control. Deleted or encrypted data past the retention window is typically gone without a separate backup.
Related services
Not sure what you're dealing with?
Describe the situation and we'll tell you what's realistic.