Most SMEs say they have data backup and recovery, which might sound reassuring, but the reality is more unnerving. One client explained that their IT manager “had it in order.” He was replacing tapes nightly, putting the backup in a plastic bag that lived on his car seat and went home with him every evening. The level of risk is unthinkable.
- 74% of businesses ‘back up’ data and systems
- BUT 42% still suffered data loss that caused downtime (Acronis)
- 10% are not backing up at all (Acronis)
So, it’s clear that having a backup is not the same as being able to recover the business.
This is a commercial warning. If systems go down, the question is not whether a backup ran overnight. The question is whether the business can return to work quickly enough to avoid serious operational and financial damage.
Backups without tested recovery are like lifeboats no one has ever launched.
Cyber disruption is common. Recovery discipline is not.
The UK government says 43% of businesses experienced a cyber breach or attack in the last 12 months. The risk is real; it’s ‘if’ not ‘when’. Yet 56% of small businesses do not have a business continuity plan that covers cyber security.
This means the majority of SMEs think they’re prepared but are not. The data highlights a dangerous overconfidence, but restoring operations fast enough after a cybersecurity breach to avoid revenue and productivity loss is far from guaranteed.
Backups fail in quieter ways than people think
Most backup problems are not dramatic. They are hidden.
Backups run infrequently, restore has never been tested, the right systems are not prioritised or the business simply assumes it is protected because someone once said, “Yes, that’s backed up.”
That is how false confidence creeps in. You must check backups are happening as scheduled and that your method is accessible for recovery needs.
Recovery time is getting worse
Recovery statistics paint a stark picture around how long it is taking businesses who are able to recover to get back to business.
The UK Government’s DSIT Cyber Security Breaches Survey 2025/2026 found:
- Businesses restoring within 24 hours fell from 92% to 87% year-on-year
- Micro-businesses dropped from 92% to 86%
So, even where backups exist, speed of recovery is slowing, which means downtime and its associated costs are growing. Added impetus to sort backups and test recovery.
Downtime is where the real cost shows up
Poor backup and recovery is not just about lost files; it is about the knock-on commercial impact on business.
- Staff unable to work properly
- Production facilities down
- Invoices delayed
- Customer service disrupted
- Leaders making decisions without access to data
- Revenue and cash flow taking a hit.
That is why backup and recovery should never be treated as a background admin task. It is a resilience issue for the board.
What good backup and recovery looks like for an SME
A credible recovery plan isn’t complex; it simply covers testing, monitoring, and prioritisation.
- Backups monitored and frequent (cloud and/or off-site)
- Protection against ransomware (immutable or air-gapped copies)
- Well-defined restore process
- Clear priorities set around what gets restored first
- Roles and responsibilities defined for recovery
- Regular restore testing to ensure real-world viability
Acronis’ stats show the biggest risk is assuming backups are enough without testing recovery, and that recovery readiness is far weaker.
“If systems went down, how quickly could we recover the business?”
That is the question business leaders need to ask. It’s about productivity, profitability, customer impact, and operational control. And it is the one worth answering before something goes wrong.
Secure data backup and recovery from commited
If you’re looking for a future-proof data recovery strategy. We’re here to help at commited. We’ll take full control of your cybersecurity and recovery systems, helping to prevent disasters before they occur with robust antivirus protection and secure cloud services.
Don’t wait for disaster to test your assumptions. Talk to us or book a no-obligation cyber risk review to discover if you could restore your business.
Newsletter
Subscribe for monthly IT advice and a chance to get Co-Op Live tickets.