Which business files should you protect first?

Start with the records you would need to serve tomorrow's customers. Write down their location, the person responsible and how you would obtain a usable copy. Keep the first inventory small enough to check yourself.

CISA's suggested categories include customer records, employee information, financial data, important emails, software settings and website databases. It recommends identifying the information your business cannot operate without. Use that inventory guidance to check your list for gaps.

A hypothetical design studio

Imagine a small studio with current artwork on a laptop, signed proposals in a shared folder and invoices inside an accounting service. List all three places. Do not mark the accounting records complete until you have checked how to export and restore them.

This is a planning example, not a reported customer result. Ask whoever manages each application to demonstrate recovery. For business priorities, connect the exercise to your small business risk plan.

Review this table with the people doing the work. Ask them to point to actual folders rather than answer from memory. Record anything you cannot yet locate as an open task.

What does the 3-2-1 backup rule mean?

Keep three copies in total, use two different storage types and place one copy away from your business premises. The working original counts as one copy. CISA gives a hard drive and cloud storage as examples of different storage types. Read its 3-2-1 rule.

For a proposed setup, keep working files on the computer, a dated backup on an external drive and a separate cloud backup. Cloud storage means a service that holds your files remotely and lets you reach them over the internet. Write down the location of each copy.

Keep file access and recovery separate in your plan

Google describes Drive's desktop modes as synchronization: keeping files aligned between your computer and the service. CISA defines backup around a separate recovery copy. My recommendation is to use synchronization for daily work while testing an independent route back to an earlier file. Google explains the sync modes here.

CISA also recommends encryption, physical protection and offline copies. Encryption protects information by making it unreadable without the appropriate key; an offline copy is disconnected from the network. Include both protection and access instructions in your backup checklist.

How do you set up Google Drive for everyday files?

Choose whether you want a full local copy of My Drive. Mirroring keeps that copy on your computer; streaming uses less local space and downloads files as needed. Google documents both options in its desktop guide.

1. Open Google Drive for desktop.
2. Open Settings, then Preferences.
3. Select Google Drive on the left.
4. Under My Drive syncing options, choose Mirror files or Stream files.
5. Before changing modes, wait for recent edits to finish syncing.

These steps come from Google's configuration instructions. Google warns that deleting an old mirrored folder before its changes finish uploading can lose unsynced files. Leave that folder alone until you have verified completion.

Check one document before moving a whole folder

Create a harmless test document in the selected working location. Open Drive in your browser and check that the document appears with its latest contents. Then repeat the check with one real, non-sensitive work file.

For streamed files needed without internet, right-click and choose Offline Access, then Available offline. Google Docs, Sheets and Slides require their own offline setup through Drive on the web. Follow Google's offline instructions for those files.

If your team manages orders in spreadsheets, review your Google Sheets workflow alongside this setup. Identify the actual business document, its owner and the recovery method you intend to test.

How do you back up computer folders with OneDrive?

On Windows, use OneDrive's folder backup settings and select the folders you want included. Microsoft places these controls under Sync and backup. Its instructions explain that files become accessible across devices after synchronization finishes. Microsoft's folder backup guide.

1. Select the OneDrive cloud icon in the notification area.
2. Open Help & Settings, then Settings.
3. Select Sync and backup, then Manage backup.
4. Enable the appropriate folders marked Not backed up.
5. Select Save changes and check that synchronization completes.

That sequence is for Windows. Microsoft gives separate Mac requirements, including the standalone sync application and Full Disk Access; workplace restrictions may also apply. Mac users should follow the macOS section of the same guide.

Next, compare the selected folders with your inventory. Test a document from each important location. Ask employees to show where they save new work, and add any uncovered location to your action list.

Read the choices carefully before stopping folder backup. Microsoft's Windows instructions offer keeping files only in OneDrive or only on the PC. Confirm the intended destination before accepting the change. Stopping folder backup.

How should you schedule a separate automatic backup?

In your chosen backup service, specify the source, destination, schedule, retained history and person receiving failure alerts. Treat these as selection requirements rather than assuming every cloud product includes them. CISA recommends a solution that runs automatically and regularly. Automatic backup guidance.

Write the job before choosing the subscription

• Source: the named folders and application exports.
• Destination: the separate storage location.
• Timing: when the backup should run.
• History: how far back you need to recover.
• Notification: who checks failures or missing runs.
• Recovery: who can restore information when needed.

Here is a hypothetical online shop plan: export the day's order records into a designated folder, include that folder in the overnight backup, and review the result the next morning. Confirm how the shop software produces its export. This example does not assume that every selling platform offers automatic exports.

Choose the frequency by asking how much recent work you are willing to reconstruct. If losing the day's order changes would be unacceptable, request a more frequent schedule. Write that requirement in everyday language before discussing settings.

Assign a primary owner and a substitute using your task delegation process. Put the operating steps in a standard operating procedure, meaning a written guide another person can follow.

For budget discussions, request setup, storage and recovery support as separate items. Compare those responsibilities with your small business cost review. Ask for a demonstrated restore before committing to a larger rollout.

How do you prove the backup will restore?

Restore a test file into a separate folder and open it. CISA recommends testing both partial and full recovery, including the ability to roll data back at least seven days when needed. Use its recovery testing guidance as your starting point.

1. Create a test document with recognizable contents.
2. Let the scheduled backup finish.
3. Change the test document and run the next backup.
4. Restore the earlier version to a separate location.
5. Check its contents and record how long recovery took.

Then ask your substitute owner to follow the written instructions. Note where they needed help. Rewrite those steps and repeat the relevant part of the test.

For disaster recovery for small business, write the order in which work should resume. In a hypothetical service company, you might restore today's appointments before archived marketing artwork. Choose your own order with the people who deal with customers.

Finish this week's setup with a short record: what was protected, when the last job succeeded, which file was restored and who will check next. Leave unresolved gaps visible. Do not mark the whole plan complete because one sample file passed.