What Would Happen to Your Business If You Lost Everything Tomorrow?
Business continuity planning is not about being pessimistic — it is about making sure a bad day does not become the end of your business
Do You Still Have an On-Premises Server?
Most Perth businesses DM1 works with no longer need an on-premises server. Modern Microsoft 365 replaces the functions a local server used to handle — file storage, email, shared drives, and user management — without the hardware cost, maintenance overhead, or recovery complexity. If your business is still running a server, it is almost certainly because of a legacy application that has not yet moved to a cloud equivalent. That situation requires a different conversation about backup, continuity, and your migration path. Call DM1 for advice specific to your setup.
What Business Continuity Planning Actually Means
Most Perth business owners hear ‘business continuity planning’ and assume it is something for large organisations with dedicated IT departments. It is not. At its core, it simply means thinking through what could go wrong, deciding in advance what you would do about it, and making sure the right technical protections are in place before something happens — not after.
A business continuity plan does not need to be a thick document. For most Perth small businesses, it comes down to three questions: What could stop us from operating? How long could we survive without our systems? What do we do first when something goes wrong?
What could stop us operating?
Ransomware, hardware failure, accidental deletion, a flooded office, a key staff member leaving with no handover — the list is longer than most business owners expect. The starting point is identifying which systems and data your business genuinely cannot operate without.
How long can we survive without our systems?
For some businesses, an hour of downtime is a manageable inconvenience. For others, it means missed client deadlines, lost bookings, or an inability to process payments. Knowing your tolerance shapes everything else about how you set up your protection.
What do we do first when something goes wrong?
Most of the cost and stress of an IT incident comes from not knowing what to do next. Having a documented response — even a one-page checklist — means staff are not making it up as they go while the business is down.
What Actually Stops Perth Businesses
When DM1 talks to new clients about their risk exposure, the threats that come up most often are not the dramatic ones from the news. They are the everyday ones that nobody planned for.
Ransomware
Criminals encrypt every file on your network and demand payment to restore them. Without a tested, isolated backup, your only options are to pay — with no guarantee of recovery — or to rebuild from scratch. Recovery without a proper backup typically takes weeks and costs far more than the ransom. See our cybersecurity page for more detail on how this works.
Hardware failure
A server, computer or storage device failing without warning is not a rare event — it is an inevitability over a long enough timeframe. If your data lives only on local hardware with no offsite or cloud copy, a single drive failure can mean permanent data loss. Most business owners discover this at the worst possible moment.
Accidental deletion
A staff member deletes the wrong folder. A shared file gets overwritten. A departing employee removes files they created. These are among the most common causes of data loss in small businesses, and they are also among the easiest to recover from — provided you have file versioning and a recycle bin that has not already been emptied.
Key person dependency
If one person holds all the passwords, manages all the systems, or is the only one who knows where things are — and they leave, become unavailable, or are simply on holiday — the business can grind to a halt. This is a continuity risk that has nothing to do with technology failing.
Loss of access to cloud accounts
A Microsoft 365 account locked out due to a compromised login, a domain that expires without anyone noticing, a billing failure that suspends your email service — cloud platforms are reliable, but account access issues can take days to resolve if there is no recovery path set up in advance.
Natural events and physical damage
A burst pipe, a power surge, a break-in, or a fire can destroy on-premises equipment instantly. If your only backup is a drive sitting next to the server in the same room, it will not survive the same event that took out the server.
Backup and Business Continuity Are Not the Same Thing
These two terms are often used interchangeably. They are not the same thing — and confusing them is one of the most common gaps DM1 finds when reviewing new client setups.
Backup is about keeping a copy of your data
A backup is a copy of your files, emails, and data that can be restored if the original is lost or damaged. It answers the question: can we get our data back? A good backup is automated, tested regularly, stored separately from the original, and covers everything the business actually needs — not just some of it.
Think of it as an insurance policy for your data
Business continuity is about keeping the business running
Business continuity is broader. It covers how you keep operating — or get back to operating quickly — when something goes wrong. It includes your backup, but also your recovery process, your communication plan, your staff roles during an incident, your fallback systems, and your timeline for getting back to normal.
Think of it as the plan for what happens when the insurance pays out
The most common gap DM1 finds: businesses that have some form of backup in place but have never tested whether it actually works, never documented who does what during an incident, and have no idea how long recovery would actually take. Having a backup and having a recovery plan are two very different things.
The 3-2-1 Backup Rule — What It Means in Plain English
The 3-2-1 rule is the most widely accepted standard for backup design. It is not a DM1 invention — it is the benchmark used by IT professionals and referenced in Australian government cybersecurity guidance. Here is what it means.
3 — Three copies of your data
The principle is: never rely on a single copy. For cloud-first businesses on Microsoft 365, your live data in SharePoint and Exchange Online is one copy. Microsoft’s geo-redundant infrastructure distributes this across multiple datacentres automatically — so hardware failure at one location does not affect you. Whether a separate independent copy adds value for your specific business is something DM1 assesses based on your requirements — not a default recommendation.
2 — Two different types of storage
Not two copies on the same infrastructure. Microsoft 365’s geo-redundant storage already addresses this for cloud-first businesses. Local copies on servers or external drives are not recommended — they add theft, hardware failure, and management risk without meaningful recovery benefit over a well-configured Microsoft 365 environment. If your business has specific compliance requirements that go beyond this, DM1 will advise on the right approach.
1 — One copy stored offsite
For cloud-first businesses, this requirement is already met by Microsoft 365 itself. Your data is stored across geographically separated datacentres by default — a fire, flood, or power event at one location does not affect your data. The practical meaning of offsite for a cloud-first business is that your data is not dependent on a single physical location, which Microsoft 365 addresses as part of its standard service.
Microsoft 365 Business Premium includes onsite redundancy and cloud storage as standard. For businesses requiring additional point-in-time restore capability, DM1 can configure Microsoft 365 Backup — Microsoft’s own backup product released in 2023. See our backup and disaster recovery page for detail.
Two Questions Every Business Owner Should Be Able to Answer
When IT professionals talk about recovery planning, they use two measures. You do not need to know the technical terms — but you do need to know your own answers to the questions behind them.
How much data can you afford to lose?
For businesses running Microsoft 365, SharePoint and Exchange Online store data continuously — not in scheduled snapshots. There is no “last backup was at midnight” problem. Version history and retention policies mean that even if a file is overwritten or deleted, recent versions are recoverable. For high-volume transaction businesses — a medical practice, a legal firm, a financial services provider — DM1 configures retention policies specifically to match how much data loss is acceptable for your situation.
Technical term: Recovery Point Objective (RPO)
How long can you afford to be down?
For businesses running purely on Microsoft 365, there is no server to restore. If a device fails, staff work from another device and data is immediately accessible. The recovery time in most scenarios is the time it takes to get a replacement device — not hours of server restoration. This is one of the most significant continuity advantages of a well-configured cloud-first environment over an on-premises server setup.
Technical term: Recovery Time Objective (RTO)
How DM1 Approaches Business Continuity for Perth Businesses
DM1 does not sell a generic backup product and call it done. Business continuity is part of how DM1 sets up and manages every client’s Microsoft 365 environment from day one.
What DM1 sets up
Microsoft 365 configured with geo-redundant storage across multiple Microsoft datacentres. SharePoint and OneDrive file versioning enabled — up to 500 versions of every document. Recycle bin retention configured. Microsoft Purview retention policies for regulated businesses that need to hold data for specific periods. Intune device management including remote wipe if a device is lost or stolen. Break-glass account configuration so admin access is never locked out.
What DM1 manages ongoing
Regular review of backup and retention policy configuration. Licence auditing to ensure departed staff accounts are offboarded and data is retained or transferred correctly. Security monitoring that can identify ransomware behaviour before encryption completes. Documentation of your environment so recovery can begin immediately without having to work out what was in place. Incident response coordination so you are not dealing with Microsoft support alone during an outage.
What DM1 Finds During New Client Onboarding
When a new client moves to DM1, our standard onboarding process includes a full review of their backup and recovery position. These are three examples of what that process found.
Discovered during DM1 new client onboarding
A backup drive sitting next to the server it was backing up
When a Perth manufacturing business moved to DM1, our standard new client checks found that their only backup was a USB drive plugged into the back of their server. The drive had not been tested in over two years and the backup software had been silently failing for several months. Had the server failed, there was no recoverable backup and no offsite copy. DM1 moved the business to cloud-based backup with daily verification as part of the new client setup.
Discovered during DM1 new client onboarding
No admin recovery path — the only person with the password had left the business
When a Perth retail business moved to DM1, our standard checks found that the Microsoft 365 Global Admin account credentials were known only to a former IT contractor who was no longer engaged. The business had no way to access their own admin settings, could not add or remove licences, and could not reset staff passwords. DM1 worked with Microsoft to recover admin access and set up a proper break-glass account so this could never happen again.
Discovered during DM1 new client onboarding
File versioning turned off — every overwrite was permanent
When a Perth legal firm moved to DM1, our standard checks found that SharePoint file versioning had been disabled at some point, meaning every time a document was saved it permanently overwrote the previous version. A staff member had already lost several hours of work on a matter file after accidentally saving over it. DM1 re-enabled versioning, restored the 93-day recycle bin retention, and configured a retention policy appropriate for legal records.
Find Out Where Your Business Stands
DM1 reviews your current backup and recovery position as part of every new client onboarding — at no extra cost. We will tell you exactly what is in place, what is missing, and what it would take to fix it.
Call (08) 6202 6012 or use the button above to get started