Cloud backup and disaster recovery from ITSecOps gives you immutable, off-site copies of Microsoft 365, Google Workspace, servers and endpoints, with restores we test every quarter and a recovery time you can put in writing. We deploy Acronis, Veeam, Datto, Dropsuite and Axcient at partner pricing, cheaper than buying direct, and manage the whole thing under one monthly price.
Updated September 4, 2026. Google Trends shows searches for “cloud backup” doubling in the last week of August 2026, and it is not hard to see why: the Medusa ransomware group passed 500 victims in August, and its playbook now deletes cloud recycle bins and shadow copies before encrypting. Backups that live inside the same tenant or the same domain are not backups any more. Immutable, off-tenant copies are.
What we back up
| Workload | Product options | Retention and immutability | Indicative price per month |
|---|---|---|---|
| Microsoft 365 (Exchange, OneDrive, SharePoint, Teams) | Dropsuite, Acronis Cyber Protect Cloud, Veeam Backup for Microsoft 365, Datto SaaS Protection | Unlimited retention, 3x daily, immutable cloud storage in EU or US | $2 to $5 per user |
| Google Workspace (Gmail, Drive, Shared Drives, Calendar) | Dropsuite, Acronis, Veeam | Unlimited retention, point-in-time restore | $2 to $5 per user |
| Servers (physical, Hyper-V, VMware, Azure and AWS VMs) | Acronis Cyber Protect Cloud, Veeam Data Platform, Axcient x360Recover, Datto SIRIS | Image-level, 3-2-1-1 (one immutable copy), instant virtual boot in the cloud | $25 to $120 per server plus storage |
| Endpoints (laptops of executives, finance, engineering) | Acronis, Axcient Direct-to-Cloud | Daily, file and image level | $4 to $8 per device |
| Disaster recovery | Acronis Disaster Recovery, Veeam replication, Datto cloud virtualisation | Documented RTO of 4 hours or less, tested quarterly | Quoted per environment |
Exact pricing depends on data volume and retention. Use the Security Stack Recommender for an indicative budget, or see the cybersecurity price comparison for vendor list prices side by side.
Why Microsoft 365 is not backed up by Microsoft
Microsoft’s shared responsibility model says it plainly: Microsoft protects the service, you protect your data. Deleted mailboxes are recoverable for 30 days, deleted files for 93 days, and none of that helps when an attacker with admin rights purges the recycle bin, when a departing employee wipes their OneDrive, or when a ransomware process encrypts synced SharePoint libraries. A third-party backup keeps immutable, versioned copies outside the tenant, restorable to any point in time.
The ITSecOps backup standard
- 3-2-1-1: three copies, two media, one off-site, one immutable.
- Verified daily: every job monitored by our NOC; failures fixed the same day, not discovered during an incident.
- Restore tested quarterly: a mailbox, a file set and a full server boot, with a report you can hand to auditors and insurers.
- Documented RTO and RPO: agreed in writing per workload.
- Ransomware-aware: backup credentials isolated from your domain, MFA on the console, alerts on mass deletion.
Backup for compliance
NIS2 Article 21 requires backup management and disaster recovery. CMMC and NIST 800-171 control 3.8.9 require protected backups of CUI. ISO 27001 control A.8.13 and SOC 2 availability criteria require tested backups. HIPAA requires a data backup and disaster recovery plan. Our reports map to each. See NIS2 compliance and CMMC.
Frequently asked questions
What is the cheapest way to back up Microsoft 365?
Dropsuite or Acronis through a partner, at $2 to $3 per user per month with unlimited retention. Buying direct from the vendor is usually more expensive because partner pricing is not available to end customers.
Do you back up to Norway or the EU?
Yes. Acronis, Veeam and Dropsuite offer EU data centres, and we can place server backups in Norwegian object storage for clients with data residency requirements.
How fast can you restore a server?
With Acronis Disaster Recovery, Datto or Veeam replication, a failed server can boot in the cloud in under an hour. Full restores to new hardware depend on data size; we agree an RTO per server in the contract.
Can you take over our existing backup?
Yes. We audit the current jobs, test a restore, fix what fails and then monitor it, or migrate you to a better product if the audit shows gaps.
Does the backup include ransomware protection?
Acronis Cyber Protect Cloud includes anti-ransomware on the agent, and every product we deploy uses immutable storage so encrypted or deleted backups can be rolled back.