Updated
Quick fix
Keep 3 copies of important data, on 2 different types of storage, with 1 copy off-site (such as the cloud). Automate it, and test a restore regularly; an untested backup isn’t a backup.
Step by step
List what matters
Customer records, accounting files, shared drives, email and any line-of-business software data.
Apply 3-2-1
Keep the original plus two backups, on two kinds of storage (for example a local backup drive and a cloud backup), with at least one copy off-site.
Automate
Schedule backups to run on their own, daily or more often for busy systems.
Protect backups from ransomware
Use a backup that keeps older versions and can’t be changed by a regular user account (sometimes called immutable or versioned backup).
Remember cloud apps
Microsoft 365 and Google Workspace keep your data online, but deleted items and mistakes may not be recoverable forever. Ask about a dedicated backup.
Test restores
A few times a year, restore a file and confirm it opens.