I work with small businesses regularly, and the backup situation is consistently one of two extremes. Either there’s no backup at all — “we’ve been meaning to set something up” — or there’s an elaborate multi-tier system that nobody understands and nobody has verified actually works.

Both are problems. The first is obvious. The second fails when it matters because the person who configured it left the company two years ago and nobody else knows the recovery procedure.

Here’s how to set up a cloud backup system that’s reliable, understandable, and proportionate to what a small business (5-50 employees) actually needs.

What You Actually Need to Back Up

Start by identifying what data your business can’t function without. For most small businesses, this falls into four categories:

Financial records. Your accounting software data (Xero, MYOB, QuickBooks), invoices, tax records, bank statements. If you lost these, you’d be in serious trouble with the ATO and couldn’t manage cash flow. If your accounting software is cloud-based (which Xero and QuickBooks Online are), the provider maintains their own backups. But you should still export your data periodically in case the provider has issues or you need to switch platforms.

Customer data. Your CRM, client contact details, project histories, communication records. Losing your customer database means losing institutional knowledge about every client relationship.

Operational documents. Proposals, contracts, SOPs, employee documentation, project files. These are the documents that keep the business running day-to-day.

Specialised data. Design files, code repositories, databases, or whatever your specific business produces. A graphic design firm’s Illustrator files are as critical as an accounting firm’s client records.

What you probably don’t need to back up: operating systems, installed software (you can reinstall these), temporary files, browser caches. Backing up everything indiscriminately wastes storage costs and makes recovery slower.

The 3-2-1 Rule — Modified for Small Business

The traditional backup rule says: keep 3 copies of your data, on 2 different types of media, with 1 copy offsite. This was devised when backup meant tape drives and local servers. The cloud-era version for small business is simpler:

Copy 1: Your working data (on employee computers, local server, or cloud workspace like Google Workspace or Microsoft 365).

Copy 2: Automated cloud backup to a dedicated backup service (not the same cloud provider as your primary storage, ideally).

Copy 3: Monthly export to an external hard drive stored offsite — a director’s home, a safety deposit box, or a second office location.

The third copy might seem redundant when you have cloud backup, but it protects against two scenarios that cloud-only backup doesn’t: your backup provider suffering a catastrophic failure, and ransomware that encrypts both your primary and cloud-connected backup before you detect it.

Choosing a Backup Service

For Australian small businesses, the main options are:

Acronis Cyber Protect — Popular with managed IT providers, offers backup plus basic cybersecurity features. Pricing starts around $7-9 per workstation per month. Good for businesses that want a single solution for backup and endpoint protection.

Backblaze Business — Simple, affordable, unlimited storage per computer for about $9 AUD per month. Does one thing well: backs up everything on the computer to the cloud continuously. Limited management features compared to enterprise solutions, but for straightforward backup needs, it’s hard to beat on value.

Microsoft 365 backup (via third-party). If your business runs on Microsoft 365, you should know that Microsoft’s built-in data protection is limited. Microsoft’s own documentation recommends third-party backup for comprehensive protection. Services like Veeam for Microsoft 365 or Datto SaaS Protection add proper backup capability for $3-5 per user per month.

Google Workspace Vault. For Google Workspace businesses, Vault provides data retention and eDiscovery, but it’s not a traditional backup — it won’t help you if a user permanently deletes files from Google Drive. Third-party tools like Spanning or CloudAlly fill this gap.

Configuration That Actually Works

Here’s a configuration template that works for most small businesses:

Backup frequency. Daily automated backups, running overnight. For critical data (financial records, CRM), consider hourly or continuous backup if your service supports it. The goal is to minimise the maximum amount of work you’d lose — if daily backups run at midnight, you could lose up to 24 hours of work if a disaster strikes at 11 PM.

Retention period. Keep daily backups for 30 days, weekly backups for 3 months, and monthly backups for 1 year. This gives you multiple recovery points and protects against the scenario where a problem (like ransomware or data corruption) isn’t detected for days or weeks.

Encryption. Ensure backups are encrypted both in transit (while being uploaded) and at rest (while stored). Most reputable backup services do this by default, but verify it explicitly. The Australian Cyber Security Centre recommends AES-256 encryption as the minimum standard for business data backup.

Testing. This is where most backup strategies fail. Schedule a quarterly test restore where you actually recover a sample of files from backup and verify they’re intact and usable. A backup that runs successfully every night but produces corrupted files when you need to restore is worse than useless — it provides false confidence.

The Cost Reality

For a small business with 10 employees, a reasonable cloud backup setup costs approximately $80-150 per month. That’s for per-workstation backup, Microsoft 365 or Google Workspace third-party backup, and a basic monitoring dashboard.

For context, the average cost of a data loss event for a small Australian business — accounting for downtime, data recreation, and lost revenue — is estimated at $15,000-50,000 according to insurance industry data. An entire year of backup costs less than a single day of serious data loss.

If budget is genuinely tight, start with Backblaze at $9 per computer per month for your most critical machines. That’s better than nothing, and you can expand from there.

The Most Important Step

Whatever solution you choose, the single most important step is the one most businesses skip: verify that restoration works. Back up your data tonight. Tomorrow morning, try to restore a file. If it works, you have a backup system. If it doesn’t — or if you can’t figure out how — you have an expensive illusion of protection.

Set a calendar reminder to test your backup restore every three months. Not a reminder to think about testing. A reminder to actually open the backup software, select a random file from last week’s backup, restore it, and confirm it opens correctly.

That quarterly test is worth more than every other word in this article combined.