Backup Readiness Checklist

1. List the information that would be hardest to lose: photos, documents, videos, records, messages.
2. Note which device or account each one is on.
3. For each, check whether a backup exists and where it goes (an external drive, the cloud, or both).
4. Fill any gaps by adding those folders or devices to a backup.

Based on the ACSC's backups guidance, checked October 2026.

1. Open the backup settings on the device or in the backup app.
2. Turn on automatic or scheduled backups.
3. Choose how often they run. The ACSC's business guidance describes basing this on how much work you could afford to lose.
4. Check the date of the last successful backup to confirm it's running.

Based on the ACSC's backups guidance and small business cloud security guidance, checked October 2026. Each device maker's help pages have the exact steps.

1. Choose where the separate copy goes: a cloud service, an external drive, or both.
2. Set the backup to save there.
3. If using an external drive, store it somewhere separate from the computer when not in use.
4. Check that the copy appears where expected.

Based on the ACSC's ransomware prevention guide, checked October 2026.

1. Plug in the external backup drive and run the backup.
2. When it finishes, eject and unplug the drive.
3. Store it in a secure place.
4. If a device may be infected, don't connect the backup to it. The ACSC describes restoring only from a backup you're confident is free from ransomware.

Based on the ACSC's ransomware prevention guide and small business cloud security guidance, checked October 2026.

1. Open the backup tool or cloud service and look for version history, snapshots or restore points.
2. Check how far back the earlier versions go.
3. A short history only helps with problems noticed quickly; some tools let the history length be changed in their settings.
4. Try opening an earlier version of one file to see how it works.

Based on the ACSC's ransomware prevention guide, checked October 2026. How versions work depends on the backup product; its maker's help pages have the details.

1. Pick a few files from the backup, including at least one photo and one document.
2. Restore them to a different folder so the originals aren't overwritten.
3. Open them to check they're complete and readable.
4. Repeat every so often, and after changing backup setups.

Based on the ACSC's ransomware prevention guide and small business cloud security guidance, checked October 2026.

1. Connect to Wi-Fi.
2. Open Settings, tap your name, then tap iCloud.
3. Tap iCloud Backup and check that Back Up This iPhone is turned on.
4. Tap Back Up Now to run one straight away, and stay on Wi-Fi until it finishes.
5. The date and time of the last backup appear under Back Up Now. If iCloud storage is full, the iPhone shows an alert.

Based on Apple's instructions, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Open Settings.
2. Tap Google services, then All services.
3. Find Backup and choose what to back up: Photos & videos, Device data, or both.
4. Turn on Backup.
5. Google says a backup can take up to 24 hours; 'On' then appears under each type of data.

Based on Google's instructions, checked October 2026. Menu names differ between phone makers; Google's guide has the latest steps.

1. Open the Google Photos app and tap your profile picture or initial.
2. Check the status: 'Backup complete', 'Backup paused', 'Backup is off', or a count of items still uploading.
3. To change backup, tap Photos settings, then Backup, and turn it on or off.
4. If an item shows 'Not enough storage to back up', Google explains that Google Account storage is shared across Photos, Drive and Gmail.
5. Google's guide also explains how deleting backed-up items at photos.google.com relates to the copies kept on the phone.

Based on Google's instructions, checked October 2026. Menus can change between versions; Google's guide has the latest steps.

1. For each important account, open its security settings and look for backup or recovery codes.
2. For a Google Account: go to your Google Account, select Security & sign-in, then 2-Step Verification, and under Backup codes select Get backup codes.
3. Print the codes or download them. Google describes keeping a printed copy somewhere safe, such as with a passport.
4. Each Google code works once. Getting a new set cancels the old one.
5. Don't share the codes with anyone.

Based on the ACSC's multi-factor authentication guide and Google's instructions, checked October 2026. Other services explain their own recovery codes in their help pages.

1. Check what recovery options your password manager offers, in its own help pages.
2. Set up any recovery option it provides, such as a recovery code or kit.
3. Store recovery information somewhere secure and separate from your devices.
4. The ACSC notes the master password itself shouldn't be saved in a web browser.

Based on the ACSC's password manager guidance, checked October 2026. Recovery options differ between products; each maker's help pages explain theirs.

1. List the Microsoft 365 data the business relies on: mailboxes, OneDrive, SharePoint sites and Teams.
2. Check whether a backup product, Microsoft's or another provider's, covers each one.
3. Check how far back restores can go. Microsoft's documentation describes Microsoft 365 Backup recovery windows of 3 months, 6 months, 1 year or 2 years.
4. Test a restore, as the ACSC describes, to confirm the backup works.

Based on the ACSC's small business cloud security guidance and Microsoft's documentation, checked October 2026. Microsoft's features and pricing change; Microsoft Learn has the latest details.