Data Backup and Disaster Recovery for North Carolina Businesses

We treat a backup as unproven until someone has restored from it. That is why the pricing page says "restore-tested", not just "backed up": a green checkmark in backup software tells you a job ran, not that the files, mailboxes or databases will open when you need them.

Backup sits inside managed IT services, so the team that restores your files is the same team that patches your machines and answers your help desk calls. When a disaster is a cyberattack, the same team also runs the 24/7 threat detection and response that is in every plan.

• Workstations and Microsoft 365: backed up and restore-tested on every plan, not sold as an add-on.
• Servers, file shares and business applications such as ERP and accounting: counted during discovery and planned to the recovery targets you set.
• Disaster recovery planning: which systems come back first, who makes the calls, and where people work if the building is unusable.
• Anything outside the plan, such as new backup hardware or a server replacement, is quoted in writing before work starts.

Key takeaway: A backup you have never restored from is a hope, not a plan. Restore testing is included in every Preferred Data plan.

Ransomware changed what "off-site" has to mean. CISA warns that many ransomware variants attempt to find and then delete or encrypt accessible backups, so it recommends offline, encrypted backups and notes that some cloud vendors offer immutable storage that cannot be altered once written. A backup drive that stays plugged into the server is on-site and online, within reach of anything that reaches the server.

Our article on immutable backups explains the difference between a copy that is off-site and one that an attacker with your admin password still cannot delete.

• Is at least one copy stored away from your building?
• Could someone with a stolen administrator password delete or encrypt every copy?
• Can you roll data back at least seven days, as CISA advises, in case an infection sat unnoticed for a week?
• When was the last time anyone restored a full system, not just a single file?

The two numbers drive the cost of a backup design, so we set them per system rather than for the whole company. If backups run once a night, your RPO is up to a day of work; if an order entry system cannot be down for more than a few hours, restoring it from a slow internet download may not meet its RTO.

For a North Carolina manufacturer, the ERP, order entry and shipping systems usually need the tightest targets, while archived drawings or old project files can wait. Our guide to setting RTO and RPO walks through the questions, and our manufacturing disaster recovery guide covers plant-specific planning.

Recovery is expensive either way. Sophos put the average cost of recovering from a ransomware attack at $1.53 million in 2025, excluding any ransom, and the mean recovery cost for manufacturers at $1.3 million. Backups the attacker could not reach are what turn that from weeks of rebuilding into a planned restore.

Recovery also depends on what happens before the restore: finding how the attacker got in, removing them, and making sure the data you restore is clean. Our ransomware recovery plan guide covers the order of operations.

• In manufacturing, 40% of attacks in Sophos's data resulted in data being encrypted, which is the moment backups either work or do not.
• Multi-factor authentication, patching and 24/7 threat detection and response are in every plan, so fewer attacks reach the point of needing a restore.

Key takeaway: Backups are only a ransomware defense if the attacker cannot delete them and someone has proven they restore.

Microsoft keeps the service running. It does not promise to bring back a mailbox a former employee emptied two months ago, a SharePoint library an attacker encrypted through a synced laptop, or files deleted before anyone noticed. That is what a separate backup is for.

Every Preferred Data plan includes restore-tested Microsoft 365 backup along with the Microsoft 365 licensing itself. Our article on the Microsoft 365 shared responsibility gap goes further, and our cloud solutions page covers migrations to Microsoft 365.

A useful test restores something real and checks that it opens: a mailbox, a shared folder, a server into a test environment, an ERP database the software can read. Checking only that a backup job finished is how a business finds out, on the worst possible day, that the backup was empty or incomplete.

We verify backups by restoring from them as part of every plan. Our backup testing guide lists the tests worth running if you manage backups yourself.

• Test a single-file restore and a full-system restore; they fail for different reasons.
• Time the full restore, and compare it with the RTO you set for that system.
• Keep a short record of each test so an insurer or auditor can see restores were proven, not assumed.

A national backup vendor can store your data. When a server dies at a furniture plant in High Point or a distribution center in Greensboro, somebody still has to rebuild the hardware, restore the system and get the shipping labels printing again. On Preferred Professional, onsite visits are included when a problem cannot be fixed remotely, and Preferred Complete includes unlimited onsite support and 24/7 help desk coverage.

We also know the systems North Carolina manufacturers depend on, including ERP and accounting software we have built and supported since 1987, so a restore plan covers the software, not just the files. See our work for manufacturers, furniture companies and logistics operations.

• Compare what each plan includes on the pricing page, then book a review of your current backups.
• Check your wider security posture with the free cybersecurity assessment tool.