For a small organisation protecting operational records, a recoverable online copy alongside at least one offline or digitally disconnected copy addresses more risks than relying on a single connected destination. The National Cyber Security Centre advises considering both online and storage-device backups; reliable internet makes cloud-led recovery more practical, while removable storage helps when connectivity is unreliable. A network-attached storage device can centralise local backups for several devices, but it still needs a separate recovery copy.
If losing invoices, contacts or customer information would interrupt work, plan for at least one copy that is disconnected from live systems when not in use. The National Cyber Security Centre warns that connected backup locations can be affected alongside original data.
If staff need to recover cloud-held files or email away from the office, check which workloads a service covers, who can restore them and how long earlier versions remain available. Microsoft documents these as separate considerations for Microsoft 365 Backup.
A centrally managed local destination may help teams backing up multiple computers or file locations. Synology and QNAP document NAS-based backup tools, but the chosen hardware and applications need checking, along with a separate off-site or disconnected copy.
Start with the records you must be able to restore and the incident the backup must survive. Then decide where routine copies will run, how a separate copy will be protected and who will test a restore.
| Concern | What to check | Who this matters to |
|---|---|---|
| Recovery after deletion or attack | Can at least one copy be disconnected from live systems, and can an earlier version be restored? | If an incident reaches my working files, I need a separate copy I can actually restore. Around 33% of consumers put this resilience need first. |
| Remote recovery | Check the covered files and services, restore permissions and recovery window for the selected plan. | When work is spread across locations, I need access to recover cloud-held records without depending on one office computer. For around 25% of consumers, remote recovery is the primary concern. |
| Unreliable internet | Can local backups run without broadband, and can the storage device be disconnected afterwards? | If uploads or downloads are unreliable, I need a local route that does not depend on a connection for every backup and restore. This is the main concern for roughly 25% of consumers. |
| Several devices | Confirm device and application compatibility, usable storage capacity and how an additional copy will be made. | With several computers to protect, I want backup tasks managed in one place rather than separately on each device. Around 17% of consumers prioritise central management. |
The National Cyber Security Centre warns that ransomware can affect original data and connected USB, network or cloud-backup locations.
Keep at least one copy offline or digitally disconnected when not in use, limit access to it and test that you can restore files.
Seagate describes Toolkit Mirror as two-way synchronisation: deletions and edits are applied to both mirror folders. That behaviour may remove the earlier file you hoped to recover.
Check whether your chosen software keeps earlier versions and offers a restore process, rather than assuming a drive's mirror feature does so.
Microsoft states that retention and deletion policies do not automatically flow through to Microsoft 365 Backup.
Identify the mailboxes, files and sites to protect, choose the required backup recovery window and establish who can perform a restore.
The Information Commissioner's Office explains that international-transfer rules depend on the actual organisations and access arrangements; access to personal information by a separate organisation outside the UK can matter.
Check processing and backup locations, sub-processors, remote access and contractual terms for the service you intend to use.
Microsoft 365 Backup is relevant when operational records are held in Exchange Online, OneDrive or SharePoint.
Synology's Active Backup for Business is a NAS-based option for centrally managing supported device and server backups.
QNAP offers NAS-based backup routes involving external devices, remote NAS units or cloud storage.
Backblaze Computer Backup is relevant to organisations protecting workstation files through a cloud service.
Seagate external storage and compatible Toolkit software are relevant to computer-based local backups.
These drives and the NAS are local backup destinations. Choose capacity and device compatibility for your records, then check the backup software and restore workflow; disconnecting a removable drive or making another separate copy remains a planning decision.
No image available
A removable destination for computer-file backups when a drive can be stored separately after use.
2TB capacity. Check the backup software's version history and restore behaviour, as well as compatibility with your computers.
No image available
A removable local destination to consider for a Mac-centred backup setup.
5TB capacity. If the drive will also be used with Windows computers, check driver requirements; confirm version history, restores and the applicable warranty before choosing it.
No image available
A local network-storage option for a team considering centrally managed backups.
Two bays; listed as diskless. Check compatible drives, usable capacity and backup-application support for this exact model. Plan another disconnected or off-site copy rather than relying on the NAS alone.
No image available
A removable storage destination where local copies are preferable to relying entirely on an internet connection.
4TB capacity; the product name specifies USB 3.0. Check the software needed for scheduled, versioned backups and whether your operating system requires reformatting.
No image available
A portable external-storage option for a backup set that fits within its stated capacity.
1TB capacity and USB 3.2 Gen 2 in the product name. Confirm the required backup software, schedule and version history before treating it as a recovery setup.
Cloud storage alone may not meet the need for a copy separated from live systems. The National Cyber Security Centre advises considering both online and storage-device backups and warns that connected cloud-backup locations can be affected in an incident; check account access, recovery requirements and a disconnected-copy plan.
Disconnect it when it is not in use if it is intended to provide an offline recovery copy. The National Cyber Security Centre warns that connected storage can be affected by malware; store the drive securely and test a restore periodically.
Not necessarily: synchronisation can copy the deletion too. Seagate says its Toolkit Mirror applies additions, deletions and edits to both folders, so check for version history, snapshots or a separate backup process when earlier files must remain recoverable.
A NAS can make sense when several devices or file locations need centrally managed backups. It brings hardware, compatibility and administration decisions; Synology says Active Backup for Business requires compatible x64 Synology NAS hardware using Btrfs, and the NAS should not be the only recovery copy.
They can if the organisation's actual arrangement constitutes a restricted transfer under UK GDPR. The Information Commissioner's Office says this depends on factors including who receives or accesses the personal information and where that separate organisation is located; check the provider's processing arrangements and applicable safeguards rather than assuming a UK-facing service resolves the question.