How do I answer the cyber insurance question about how often we back up?

What exactly does the form ask?

These are the forms' own words, with the form and page each comes from.

Do you regularly back up your business critical data?

Do you backup all critical applications, servers and data?

How frequently are backups run?

All system configuration and data are backed up:

Please provide details on the frequency of your backups, including the frequency of full system backups and the frequency of incremental/differential backups of critical data:

What does it mean for a small firm?

Critical data is what you could not work without: client files, accounts, email. Some forms also ask about system settings, not just files.

How do I answer it truthfully?

Open the backup system and read the schedule and the date of the last successful run. Answer with that. If some critical data is not in it, such as email held in a cloud service, say so.

Can an outside reading check this?

An outside reading cannot see backups. Nothing inside your network, your devices or your accounts can be seen from outside, so this cannot be checked that way. Only your own settings and records can show it.

Which questions sit next to this one?

• Offline and immutable backups
• Backup testing and restore time
• MFA on backups
• Syncing services as backup