The short answer: Most businesses need both. Local backup gives you fast recovery for everyday issues like accidental deletions and hardware failures. Cloud backup protects you from the things that can take out your entire office: ransomware, fire, flood, or theft. Using one without the other leaves a gap. The 3-2-1 backup rule (three copies of your data, two different storage types, one offsite) is still the standard for a reason.
If you’re not sure whether your current backup setup actually covers you, we can review it for you. CRT offers a free, no-obligation IT audit that includes a look at your backup and disaster recovery posture. We work with businesses across Brisbane, the Sunshine Coast, and remotely Australia-wide.
What Is Local Backup?
Local backup means storing copies of your data on physical hardware at your premises. That might be an external hard drive, a network-attached storage (NAS) device, or a dedicated backup server sitting in your office.
The biggest advantage is speed. Restoring files from a local device is fast because everything travels over your internal network, not the internet. If someone accidentally deletes a file or a workstation fails, you can usually recover in minutes.
The downside is that local backups live in the same physical location as your production data. If your office floods, if there’s a fire, or if ransomware spreads across your network, your backup is exposed to the same event. A local backup also needs hands-on maintenance: someone has to monitor it, test it, and replace hardware when it ages out.
For businesses that rely on a single USB drive or external hard drive as their only backup, the risk is real. If that drive fails, gets stolen, or sits unplugged, you have nothing.
What Is Cloud Backup?
Cloud backup sends encrypted copies of your data to a remote data centre over the internet. The data is stored offsite, usually across multiple geographically separate locations, so it’s protected even if something happens to your physical office.
Cloud backups are typically automated. Once configured, they run on a schedule without anyone needing to plug anything in or swap a drive. They also scale easily. If your data grows, your storage grows with it.
The trade-off is restore speed. Downloading a full backup from the cloud depends on your internet bandwidth. For a single file or folder, it’s usually quick. For a full server restore after a major incident, it can take hours or longer depending on the volume of data and your connection speed.
Cloud backup also means trusting a third-party provider with your data. For Australian businesses, that means checking that your provider stores data in Australian data centres and meets local data sovereignty requirements.
Where Each One Falls Short
Local backup fails when the threat is physical or network-wide. A fire doesn’t care that your backup drive was sitting on the shelf next to the server. Ransomware that encrypts your network will often target connected backup devices too. And if no one has been checking that the backup actually runs, you might not find out it stopped working until the day you need it.
Cloud backup fails when you need large-scale recovery fast. If your entire server environment needs to be rebuilt and you’re downloading terabytes over a standard internet connection, you’re looking at significant downtime. Cloud backup also depends on your internet being available, which isn’t guaranteed during a major outage.
Neither approach on its own covers every scenario. That’s why the standard recommendation is to use both.
The 3-2-1 Backup Rule
The 3-2-1 rule has been the baseline for backup strategy for years, and it still holds up. The concept is simple:
Keep three copies of your data (the original plus two backups). Store those backups on two different types of media (for example, a local NAS and a cloud service). Make sure one copy is offsite (cloud backup handles this automatically).
Some providers now extend this to 3-2-1-1-0: add one immutable copy that can’t be altered or deleted (protection against ransomware), and verify zero errors in your backup with regular restore testing.
For most small to mid-sized businesses, a practical version of this looks like a local backup device in the office for fast day-to-day recovery, combined with cloud backup to Australian data centres for disaster recovery and offsite protection. Automated, tested regularly, and monitored by someone who will notice if a backup fails.
What Should Your Business Be Doing?
If your only backup is a USB drive on someone’s desk, or a NAS that hasn’t been checked in six months, or a cloud sync tool like OneDrive that you’re treating as a backup (it isn’t, as syncing isn’t the same as backup), you’ve got gaps.
A solid backup setup for a small to mid-sized business looks like this:
Local backup running on a NAS or backup appliance, with scheduled snapshots throughout the day. Cloud backup replicating your critical data (servers, Microsoft 365 data, endpoints, line-of-business applications) to encrypted, geo-redundant storage in Australian data centres. Automated monitoring so failed backups get flagged immediately, not discovered weeks later. Regular restore testing so you know the backup works before you need it, not after.
At CRT, our managed IT plans include data backup and disaster recovery as part of the per-user fee. We protect servers, Microsoft 365 data, endpoints, and critical applications with encrypted backups and rapid restore capability. Every backup is tested regularly. Our team supports businesses from our Brisbane and Sunshine Coast offices, as well as remotely across Australia.
What About Microsoft 365? Isn’t That Already Backed Up?
This is one of the most common assumptions we hear. Microsoft 365 keeps your data available, but it doesn’t back it up the way most people think. If a user permanently deletes emails, if data is lost during a migration, or if a ransomware attack encrypts files in SharePoint or OneDrive, Microsoft’s native retention policies may not be enough to get everything back.
A dedicated Microsoft 365 backup solution captures point-in-time snapshots of your mailboxes, SharePoint, OneDrive, and Teams data. That means you can restore to a specific moment, not just whatever Microsoft’s retention window still has available.
Frequently Asked Questions
Is cloud backup safer than local backup?
Cloud backup is better protected against physical threats (fire, flood, theft) and network-based attacks like ransomware, because the data is stored offsite and usually immutable. But “safer” depends on the full picture. A well-maintained local backup with proper air-gapping can be very secure too. The safest approach is using both, which is what the 3-2-1 rule recommends.
How often should my business data be backed up?
For most businesses, critical data should be backed up at least daily. Many managed backup solutions run multiple snapshots throughout the day, giving you recovery points every few hours. The right frequency depends on how much data you can afford to lose. If losing a full day’s work would be a serious problem, you need more frequent backups.
Does syncing files to OneDrive or Google Drive count as backup?
No. Syncing mirrors your files to the cloud in real time, which means if a file is deleted or corrupted locally, that change syncs too. Backup creates independent, point-in-time copies that you can restore from even if the original is gone. Sync is useful for access and collaboration. It’s not a replacement for backup.
What happens if my cloud backup provider goes down?
Reputable providers store your data across multiple data centres with built-in redundancy. The risk of a major provider losing your data entirely is low. That said, it’s one more reason to maintain a local backup as well. If your cloud provider has an outage, you still have a local copy to restore from.
How much does cloud backup cost for a small business?
In Australia, managed cloud backup typically costs between $10 and $50 per month per terabyte, depending on the provider and the level of service (automated monitoring, restore testing, reporting). For businesses on a managed IT plan, backup is often included in the per-user fee rather than billed separately.
What’s the first step if I don’t have a proper backup in place?
Start with an audit of what you’re currently backing up (and what you’re not). Identify your critical data: servers, email, financial systems, client records. Then talk to a managed IT provider who can recommend and set up a backup strategy that covers both local and cloud, with monitoring and regular testing.
Want to know if your current backup protects your business? We’re happy to take a look and give you an honest assessment (no obligation).
