Choose backup storage around the failure your small business needs to recover from, not capacity alone. Cloud backup offers an off-site route if connectivity and account access are dependable; a removable drive can be disconnected between backup runs; and network-attached storage (NAS) can serve several devices but still needs a separately protected copy. The National Cyber Security Centre advises keeping backups recoverable without leaving every copy exposed to the same incident.
If the working computer or network is affected, they need a recent copy that remains accessible. The National Cyber Security Centre advises against having every backup connected at the same time; a removable copy is useful only if someone maintains and disconnects it.
When staff use several devices or locations, automated backups and a clear restore procedure can matter more than administering local storage. Account permissions and access to the backup must also be protected, as the National Cyber Security Centre advises.
A transportable secondary copy needs protection against unauthorised access if the device is lost or stolen. The Information Commissioner's Office identifies encryption as a possible safeguard; the business also needs workable password and recovery arrangements.
Start with the records and working files needed to resume operations, then decide which failures each copy must survive. A cloud destination, a disconnected drive and NAS answer different needs; combining destinations is worthwhile only if both copies stay current and can be restored.
| Concern | What to check | Who this matters to |
|---|---|---|
| Recovery after ransomware or device loss | Can one recent copy remain disconnected or separately protected? Confirm who updates it and test a file restore. | If malware reaches my computer, I need a copy I can still use to reopen essential records. Around 33% of consumers put this recovery need first. |
| Off-site backup and subscription fit | Check what the service backs up, version retention, restore options, account roles and subscription terms. | When work spans devices or locations, I want backups to run without carrying a drive and need a practical way to retrieve files. For around 25% of consumers, that off-site recovery need comes first. |
| Shared capacity and file versions | Allow for data growth and retained versions; check device support and where a second copy will be kept outside the NAS. | Our team creates files on several computers, so I need shared storage and a way to retrieve an earlier version. This is the primary concern for around 25% of consumers. |
| Confidentiality of portable records | Check encryption on the exact model, device compatibility and what happens if a password is lost. | If I carry a copy of customer records, I need to limit access should the device go missing without making recovery depend on one forgotten password. Around 17% of consumers prioritise this protection. |
The National Cyber Security Centre reports incidents in which ransomware encrypted connected USB and network backup drives. A copy exposed alongside the working device may be unavailable when it is needed.
After a removable-drive backup, safely disconnect the drive and store it securely. Keep another separately protected copy rather than relying on that drive alone.
Backups may include files from several devices and retained versions. Capacity that fits the current files may not fit the intended backup history.
Measure what must be protected, allow for growth and decide how many earlier versions the chosen software or service must retain.
The Information Commissioner's Office explains that encryption can help protect stored personal information, but security measures must be appropriate to the risk. Buying an encrypted device does not establish UK GDPR compliance.
Consider access permissions, passwords or keys, physical storage and restoration procedures alongside encryption.
Western Digital says a forgotten password on a supported drive using WD Security cannot be recovered and the drive must be erased before reuse.
Check the exact model's recovery rules, document authorised access securely and maintain another recoverable copy.
External drives may suit a business that can maintain a locally held, disconnectable copy.
External-drive lines are relevant when a local backup target and a supported computer-backup workflow are needed.
NAS systems may suit teams that need a shared local backup target and centrally managed restore points.
Encrypted removable media may suit a transportable secondary copy of selected records.
A managed backup platform is an alternative to buying storage hardware alone.
These drives are options for a locally held copy that can be disconnected after a backup run. Choose capacity against your files and intended retention, confirm the backup and restore workflow, and keep a separately protected copy where one drive would leave a single point of failure.
No image available
A removable local copy suits a business that can manage backup runs and store the drive separately afterwards.
2TB capacity. Confirm the backup software, restoration process and password-recovery rules for this model before relying on it.
No image available
This removable drive is worth considering when a larger local backup set needs a copy that can be stored separately.
5TB capacity. Check compatibility with the business's computers, the intended backup utilities and this model's password-recovery procedure.
No image available
This portable SSD can serve as a disconnectable local destination when the business manages its own backup process.
2 TB capacity and USB 3.2 Gen 2 connection. Check the software used for scheduling and versions, test a restore, and confirm how optional password protection is set up and recovered.
No image available
This removable option suits a larger local backup set if someone can maintain and securely store the copy.
4 TB capacity and USB 3.2 Gen 2x2 interface. Check the computer's port and cable, the intended backup workflow and password-recovery arrangements; test restoration before depending on the drive.
No image available
A portable local copy may suit a business that needs to disconnect and store its backup between runs.
1 TB capacity and USB 3.2 Gen 2 connection. The listing describes IP65 protection but says not to submerge the drive; check the intended backup software, restoration steps and password-recovery arrangements.
Use cloud backup when automated off-site recovery is the priority and backup accounts can be protected; use an external drive when you need a local copy that can be disconnected. The National Cyber Security Centre advises considering both online and storage-device backups, so that one lost or compromised route does not remove every copy.
It is an offline copy while disconnected from the working device or network. Connect it for the backup or restore task, then safely disconnect and store it securely; the National Cyber Security Centre warns that ransomware can affect connected USB and network backup drives.
No device purchase establishes UK GDPR compliance. The Information Commissioner's Office says security measures must be appropriate to the risk and encryption is not specifically required for every instance of personal information; access controls, key management and wider procedures also need consideration.
Set a documented test frequency around how much lost work and downtime the business can accept, rather than assuming a universal interval. The National Cyber Security Centre advises keeping backups recent and restorable; a test should also confirm that the required credentials and equipment are available.
The outcome depends on the exact drive and its security software. Western Digital says a forgotten password on a supported drive using WD Security cannot be recovered and requires erasure before reuse, so check the model's rules and retain another recoverable copy.