Backup and DR that proves it works.
Most clients learn their backup didn’t work the day they need it. Sierra Miles verifies recoveries on a schedule — and documents the evidence in your BCDR file.
BAA-Ready
Quarterly Test Restores
Healthcare · Legal · SMB
We reply within 1 business hour during business days.
“Did the backup run?” isn’t the same question as “Can we recover?”
The most common backup failure isn’t the backup itself — it’s discovering the recovery doesn’t work when the office is already shut down. Sierra Miles builds BCDR with verification cadence written into the engagement.
What’s included — and what’s honestly not.
Included every month
- Image-based backup with offsite copy (3-2-1 minimum)
- Daily backup monitoring + failure alerting
- Scheduled test restores, documented in the BCDR file
- Quarterly RTO/RPO objective review
- Documented runbook for primary recovery scenarios
- HIPAA-aware retention for healthcare clients
- Microsoft 365 and SaaS data protection
- Recovery on-call during business hours and after
Project / add-on (priced separately)
- Full DR site build-out or hot standby infrastructure
- One-time data migrations off legacy backup vendors
- Forensic recovery after a confirmed ransomware event
- Compliance audit prep (HIPAA, SOC 2, CMMC)
- Bare-metal restores for unmanaged appliances
- Third-party backup software the client owns directly
Tiered RTO/RPO and tested recovery.
Hours RTO · Sub-hour RPO
EHR systems, financial platforms, line-of-business apps that stop the business cold when they’re down.
Same-day RTO · Daily RPO
File servers and productivity apps where a same-day return is acceptable and a daily recovery point is enough.
Days RTO · Daily/weekly RPO
Document retention, audit data, and long-tail records where availability matters less than provenance.
Targets are scoped per client environment and documented in the BCDR plan. We don’t publish absolute promises — we set targets, write them down, and verify them on a cadence.
Outcomes, in plain English.
Backups you’ve actually tested
Image-based backup, offsite copy, and scheduled test restores. The recovery isn’t theoretical — it’s documented in your file.
Faster recoveries when it matters
Runbooks for your top recovery scenarios, on-call coverage, and a single throat-to-choke when the office is shut down.
Evidence reports, not assumptions
Quarterly recovery objective reviews translate your BCDR posture into something you can show an auditor, an insurer, or a board.
AI-assisted anomaly review
We layer practical AI tooling on backup telemetry to catch silent failures sooner — without replacing the human review step.
Pick the shape that fits.
BCDR inside Managed IT
Backup, verification, and recovery on-call rolled into a Fully Managed IT engagement. Best for clients who want one accountable provider.
Co-Managed BCDR
We own the backup tooling, verification cadence, and runbooks. Your internal IT lead keeps the operational seat. Best for teams that already have one person carrying it.
BCDR Plan & Cleanup
Audit your current backup stack, build the BCDR document, and prove the recovery actually works. Fixed scope, fixed timeline.
The recovery risks we know cold.
Practices that cannot afford EHR downtime
BCDR is a documented HIPAA control. We sign a Business Associate Agreement, scope retention to your record schedule, and verify the recovery in a way an auditor can read.
Firms where lost files end relationships
Matter files, signed documents, and email archives recovered without drama. Confidentiality preserved at every step in the restore.
Four NCET wins. One Reno-built MSP.
The questions buyers actually ask.
How do you prove the backup actually works?
We run scheduled test restores and document the result in your BCDR file. “Did the backup job succeed” is a green checkmark; “can we recover the data” is a written test result.
What RTO and RPO can we expect?
Targets are tiered. Critical systems get hours of RTO and sub-hour RPO; standard systems get same-day; archive systems get daily-to-weekly. We scope targets to your environment and document them, rather than publishing absolutes.
Do you cover Microsoft 365 and SaaS data?
Yes. Mail, OneDrive, SharePoint, and core SaaS platforms are protected with retention separate from the vendor’s native trash. SaaS providers protect their service — not your data.
What happens during a ransomware event?
Immutable / offsite copies are isolated from the production environment. The recovery runs against the documented runbook, not improvised. Forensic work is scoped separately.
Does this satisfy HIPAA?
BCDR is a HIPAA Security Rule control. For healthcare clients, we sign a BAA, document the recovery cadence, and retain test-restore evidence so the audit answer is “here is the file.”
Find out if your backups actually work.
One conversation. We’ll tell you in plain English where the BCDR plan stands.
Talk to us →