Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Yes, if your business keeps its only backups continuously reachable from the same accounts or systems an attacker could compromise—and has never tested restoring them. That combination can leave you with no usable recovery path when ransomware hits. CISA recommends encrypted backups kept offline, plus regular checks that they are available and intact. No single safeguard prevents every attack, but layered security and a tested recovery plan can reduce risk and limit disruption.
What is the mistake that can make ransomware harder to recover from?
It is treating “we have backups” as proof that the business can recover. Backups that remain accessible to compromised systems or accounts may be deleted or encrypted during an attack. And a backup that has never been restored is an untested assumption: the files could be incomplete, damaged, outdated, or too difficult to recover in the time your business can afford.
CISA’s interagency #StopRansomware Guide defines the threat this way: “Ransomware is a form of malware designed to encrypt files on a device, rendering them and the systems that rely on them unusable.” Some attacks also involve data theft and threats to disclose the stolen information, so restoring files may not resolve every consequence.
How should a business make its backups more recoverable?
- Identify what must come back first. List critical data, systems, and services, and decide which ones the business needs to restore before others.
- Keep protected copies out of attackers’ reach. CISA recommends encrypted backups stored offline. A copy that remains continuously accessible through the same environment as live systems may be exposed if that environment is compromised.
- Test availability and integrity regularly. Practice restoring from backup and verify that the restored data is usable. A successful backup job alone does not establish that recovery will work.
- Keep backup access tightly controlled. Limit who and what can access or change backup copies, and separate them from ordinary day-to-day access where practical.
- Document the recovery sequence. Make clear who can authorize restoration, where clean copies are, and how to bring critical services back without reconnecting compromised systems.
An encrypted external backup drive can be one component of an offline backup approach, but it is not a complete plan by itself. It must be encrypted, stored separately from live systems, and included in regular restore tests.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
What other safeguards belong in a ransomware plan?
Backups address recovery, not the full range of ways an attacker can get in or move through a business network. CISA’s guidance points to a layered approach:
- Use phishing-resistant multi-factor authentication (MFA), especially for email, VPN access, and accounts that control critical systems. A FIDO2 hardware security key may be an option if the organization’s identity provider and services support it.
- Update software and manage vulnerabilities so known weaknesses are addressed rather than left available to attackers.
- Apply least privilege: give employees, administrators, and third parties only the access their roles require.
- Segment networks to help limit how far a compromise can spread between systems.
- Maintain an incident response process that assigns responsibilities and gives staff a clear way to act under pressure.
For a small business, the practical question is whether it can operate these controls consistently with its own staff or needs help from an MSP or incident-response provider. If using a third party, assess its security practices and limit its access to what it needs.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
What should you do if ransomware affects your business?
- Isolate affected systems to limit further spread, following your incident response process.
- Prioritize critical services and determine what must be restored first.
- Use clean, offline backups for recovery. Take care not to reconnect compromised systems or otherwise reintroduce the threat during restoration.
- Verify restored systems and data before returning them to normal operations.
Recovery is a coordinated process, not simply copying files back. Organizations should follow their incident response plan and seek qualified incident-response assistance when their internal capability is insufficient.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
How can you tell whether your business is prepared?
Use these checks to identify gaps. They are practical decision points, not a quantified ranking of controls.
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
- Recovery confidence: Can you restore critical systems from a recent backup, and has someone tested the procedure?
- Isolation: Are backup copies offline or otherwise protected from accounts and systems an attacker could control?
- Authentication: Is phishing-resistant MFA enabled for email, VPN, and privileged accounts?
- Access scope: Do staff and third parties have only the access needed for their responsibilities?
- Operational fit: Is there a named person or provider who can carry out the plan, and do they know their role?
If you cannot answer the recovery questions confidently, start by documenting what must be restored, protecting a backup copy from live-system access, and scheduling a restore test. Then address authentication, patching, access, and response planning as part of the same readiness effort.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What does the ransomware threat figure mean?
A June 4, 2025 joint CISA, FBI, and ASD advisory says the FBI was aware of approximately 900 entities allegedly exploited by Play ransomware actors as of May 2025. That is a dated figure concerning one named group—not a count of all ransomware victims or a measure of any individual business’s risk. The advisory recommends measures including MFA, offline backups, recovery planning, and software updates.
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Security practices reduce exposure and improve resilience; they cannot guarantee that a business will avoid every incident. CISA’s #StopRansomware resource page lists the guide’s revision date as October 19, 2023.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
