Backup coverage and protected copies
We protect servers, virtual machines and business data with appropriate retention, offsite copies and immutable storage, keeping backup administration separate from everyday access.
Home / Cybersecurity / Backup and Disaster Recovery
Microsoft 365 and server backup
Backup and Disaster Recovery that gets your business working again
We protect Microsoft 365, servers and business data with managed backup and tested recovery. Our engineers monitor backup health, maintain recovery plans and restore the systems your people rely on.
Available on its own or alongside your IT team or provider
- Microsoft 365Protected
- File server and VMsProtected
- Retention lock30 days
- Last restore testPassed
Monitored by our engineersRestores tested
ProtectMicrosoft 365, servers and the data you rely on
PreserveImmutable storage, offsite copies and retention
RecoverIdentity and administrator access
ValidateRestore tests and recovery records
OperateMonitoring, remediation and improvement
Operate across
Microsoft 365·Exchange Online·SharePoint·OneDrive·Servers and virtual machines·Immutable storage·Offsite copies·Entra ID·Active Directory·RTO and RPO
What we protect
Backup and recovery coverage
We design backups and recovery tests around your critical systems, acceptable downtime and data-loss limits, so protection reflects the way your business works.
Microsoft 365 backup
We provide independent backup for Exchange Online, SharePoint and OneDrive, including Teams files stored there, with retention you choose and recovery of anything from a single item to a whole mailbox or site. Microsoft 365 backup is available on its own.
Built-in Microsoft 365 recoveryOur managed backup service
RetentionRecycle bins and version history have recovery limits. Retention policies can preserve content for a defined period or indefinitely.Independent copies kept for the retention period you choose
Restore optionsItem and site recovery inside those windowsSingle items through to whole mailboxes and sites, from a point in time you select
Ongoing managementManaged through your Microsoft 365 administrationMonitored by our engineers, with failures followed up and restores tested
Identity and administrator recovery
We prepare recovery access for Entra ID, Active Directory and backup administration, with MFA and emergency credentials kept separate from everyday accounts.
Recovery testing
We test restores, check that recovered data and applications are usable, and record timings and dependencies. A standalone recovery review includes practical tests and a prioritised action plan.
Recovery planning and restore order
We document priorities, responsibilities and restore order across identity, networks, infrastructure, applications and the suppliers you depend on. For a cyber incident, the plan also covers containment, clean recovery points, secure access and your ransomware payment reporting responsibilities.
Records for management, insurers and customers
We document coverage, retention, restore-test results and remediation, so you can explain your recovery arrangements to management, insurers and customers.
Recovery gaps
Find the gaps before you need to recover
We check for obstacles that could interrupt recovery even when backup jobs complete successfully.
Backup completed
Recovery obstaclesWhat still stands between a completed job and a working business
- Outdated restore tests
- Missing Microsoft 365 coverage
- Compromised administrator access
- Unknown restore order
- Untested recovery times
- Missing recovery records
See what you can recover and what needs attentionOur tests measure recovery performance and identify practical improvements.
Recovery drill
A recovery drill with results you can use
Each test follows the order your systems depend on, and each step is timed and recorded so you know what recovery really looks like for your business.
Recovery drillFinance and project systems
Passed- Access checked
- Restore point selected
- Dependencies restored
- Data recovered
- Applications checked
- Results recorded
Elapsed time · hoursSample recovery drill
How we work
From first review to tested recovery
01
Understand
We review your critical systems, existing backups and what downtime would cost the business.
02
Strengthen
We improve coverage, retention, copy protection and recovery access.
03
Validate
We test restores against your recovery priorities and record the results.
04
Operate
We monitor backups, resolve failures and keep recovery plans current as your systems change.
Common triggers
When your recovery plan needs a review
Insurance or customer requirementsCurrent coverage and test records are needed.
A change of IT providerOwnership, access or responsibilities need attention.
New systems or business growthProtection needs to cover new workloads and locations.
Recent work
All case studiesSee what we've delivered for our clients
Property development and construction · Microsoft 365 backup
JQZ
Project records you can get back
We implemented independent Microsoft 365 backup for JQZ, configured retention for its recovery needs and tested restores of mailbox, file and project content.
Read the case study → Mining equipment and industrial services · Managed IT
PPK Mining Equipment
Bringing backup into day-to-day IT management
We reviewed backup coverage, monitored backup health and clarified recovery pathways and responsibilities within PPK's managed IT service.
Read the case study → Common questions
Questions we get asked about backup and recovery
Can we buy backup without moving our IT to you?
Yes. We work alongside your existing team or provider. Microsoft 365 backup, recovery reviews and testing projects are also available separately.
What is the difference between backup and disaster recovery?
Backup preserves copies of your data. Disaster recovery brings systems back into operation, including access, infrastructure, applications and validation.
Does Microsoft 365 already back up our data?
Microsoft provides resilience, retention and recovery features, plus a separate Microsoft 365 Backup service. We review your arrangements and provide independent backup suited to your recovery needs.
What does immutable backup mean?
Immutable copies cannot be altered or deleted during their protected retention period. We combine them with secure administration and offsite copies to protect the recovery data itself.
How quickly could we recover?
It depends on the systems and data involved. We set recovery time and data-loss targets (RTO and RPO) with you, then test against them so you know what's achievable.
Can you test the backups we already have?
Yes. We review your platform and access, test selected restores and document the results. Testing should be regular and follow any significant change to your systems or backups.
How do backup and managed security work together?
During a cyber incident, recovery is coordinated with containment and remediation. We work with the security team to establish clean access, select suitable recovery points and check systems before returning them to use.
Do we need to report a ransomware payment?
Businesses above the $3 million annual turnover threshold and covered critical infrastructure entities must report ransomware or cyber extortion payments within 72 hours of paying or learning a payment was made on their behalf. See the government reporting guidance for eligibility and reporting details.
Work with Inlight IT
Know what you can recover, and how fast
Talk to us about protecting your critical systems, testing recovery and keeping your business prepared as it grows.
Prefer email? contact@inlightit.com.au