Data protection and managed backup for South African businesses

Laptops get lost. Folders get deleted. Ransomware turns up uninvited. Our managed backup services keep a clean, tested copy of your data waiting in the wings, so a bad day stays a bad day and never becomes a business-ending one.

Quick answer

Data protection in a nutshell

NETCONFIG's data protection services back up your important business data using the 3-2-1 rule, check every backup job, regularly test-restore to prove the backups work, and help you recover quickly when something goes wrong. Our managed backup services cover servers, Microsoft 365, laptops and cloud workloads. Start with a free backup assessment to see what's protected today and what isn't.

What actually goes wrong (and how backups save the day)

Data loss is rarely a Hollywood hack. It's usually an ordinary Tuesday that goes sideways.

Ransomware

One dodgy email attachment and everything is locked behind a ransom note. With clean copies the attackers can't reach, we restore your files instead of you negotiating with criminals. Stopping the attack in the first place is the job of our cyber security team.

The vanishing folder

Someone tidies up the shared drive a little too enthusiastically. We find the earlier version and put it back. No drama, no finger-pointing.

The laptop left in an Uber

The laptop can be replaced. The proposal you spent three weeks on can't. With device backups, the work comes back even if the laptop doesn't.

The disgruntled ex-employee

Someone leaves on bad terms and deletes years of work on the way out. Backups they can't touch mean their parting shot misses.

The flooded server room

A burst geyser, a Durban downpour, a Highveld storm. Because one copy always lives offsite, the water only gets the hardware, not your data.

Power cuts and load-shedding

A server that loses power mid-save can corrupt files. Monitored backups spot the problem and give us a healthy copy to restore.

Why "we have backups" isn't quite enough

54%

In Sophos's State of Ransomware 2025 survey of 3,400 IT leaders, only 54% of organisations whose data was encrypted got it back using backups, the lowest rate in six years. Backups only help if they survive the attack and actually restore.

2,374

South Africa's Information Regulator says 2,374 security compromises (data breaches) were reported in the 2024/25 financial year, and the monthly average rose by 40% in the months that followed.

Sources: Sophos, The State of Ransomware 2025 (June 2025); Information Regulator media briefing, 13 November 2025.

The 3-2-1 backup rule (simple enough to explain at a braai)

The 3-2-1 rule is the backup world's golden rule, recommended by cybersecurity agencies such as the US CISA. Here's what it means in plain English.

Three copies

Your original data plus two backups. If you only have one copy, you don't have a backup.

Two types of storage

For example, a local backup device and the cloud, so one failing gadget can't take everything down with it.

One copy offsite

At least one copy lives away from your office, out of reach of fire, flood and thieves.

The modern upgrade: 3-2-1-1-0. Our managed backup services start with the 3-2-1 rule, and many backup providers now add one copy that is offline or can't be changed (immutable), so ransomware can't scramble it, and zero errors, proven by test restores.

How our managed backup services work, step by step

  1. Assess

    We map what data you have, where it lives, how long you need to keep it and how quickly you'd need it back.

  2. Back up

    We set up automatic backups that follow the 3-2-1 rule, with an encrypted offsite copy.

  3. Monitor

    Our team checks backup jobs daily and fixes failures before they turn into gaps.

  4. Test restores

    We restore real files and systems often to prove they work, and share the results with you.

  5. Recover

    When something goes wrong, we restore what you need, in the order your business needs it.

What our managed backup services protect

  • Servers, on-site or virtual
  • Microsoft 365: email, OneDrive, SharePoint and Teams
  • Laptops and desktops
  • Cloud workloads, such as Microsoft Azure

Not sure what you've got? That's exactly what the free assessment is for.

Recovery speak, in plain English

RPO (recovery point objective): how much recent work you could afford to lose, measured in time. An hour? A day?

RTO (recovery time objective): how long you can wait before you're up and running again.

We agree both with you up front, so your backup plan matches how your business really works.

Free backup assessment Find the gaps before they find you

In a short chat and a quick look at your setup, we'll check what's backed up, what isn't, and whether a restore has ever been tested. You get a plain-English summary and, if it's a good fit, we'll show how our managed backup services could close any gaps. No obligation, no hard sell.

Backups and POPIA: what the law actually says

Section 19 of the Protection of Personal Information Act (POPIA) says:

"A responsible party must secure the integrity and confidentiality of personal information in its possession or under its control by taking appropriate, reasonable technical and organisational measures to prevent— (a) loss of, damage to or unauthorised destruction of personal information; and (b) unlawful access to or processing of personal information."

Reliable, tested backups are one of the most practical ways to guard against loss and destruction. Two more sections matter. Section 21 says that when a provider (like us) processes personal information for you, there must be a written contract making sure we maintain those safeguards. Section 22 says that if personal information may have been accessed by someone unauthorised, you must notify the Information Regulator and affected people as soon as reasonably possible. Since 1 April 2025 this is done through the Regulator's online eServices portal.

We're IT people, not lawyers, so we pair our managed backup services with clear guidance and point you to legal advice where you need it. Explore our managed POPIA compliance service.

Support throughout South Africa

Our head office is at 28 Essex Terrace, Westville, Durban. Dedicated technicians support our clients throughout South Africa, and our managed backup services are monitored remotely, so your data is looked after wherever your team works.

Head office: Westville, Durban

Data protection questions, answered plainly

What is the 3-2-1 backup rule?

The 3-2-1 rule means keeping three copies of your data: the original plus two backups. Those copies live on two different types of storage, such as a local backup device and the cloud, and at least one copy is kept offsite. If one copy fails, gets stolen or floods, another one is still safe.

What is the 3-2-1-1-0 backup rule?

It's a newer version of the 3-2-1 rule used by many backup providers. The extra 1 means one copy is offline or immutable, so it can't be changed or deleted, even by ransomware. The 0 means zero errors: backups are checked and test-restored, so you know they actually work when you need them.

Isn't Microsoft 365 already backed up?

Microsoft keeps Microsoft 365 running and protects its own infrastructure. Getting back a specific mailbox, Teams chat or SharePoint folder that someone deleted months ago, or that ransomware scrambled, is a different job, and built-in retention has limits. A separate Microsoft 365 backup gives you your own copy to restore on your timeline.

How do you recover from a ransomware attack?

First, isolate affected devices so the infection can't spread. Then work out what was hit and when, and report it if personal information may have been accessed. Next, restore clean data from a backup the attackers couldn't reach, after checking it's free of malware. Finally, close the gap they used to get in.

How often should backups be tested?

Regularly, and on a schedule you can see. A backup that has never been restored is a hope, not a plan. We run test restores daily and share the results, so you know your files, mailboxes and servers can actually come back when you need them.

What is the difference between RPO and RTO?

RPO, or recovery point objective, is how much recent work you could afford to lose, measured in time: an hour, or a day? RTO, or recovery time objective, is how long you can wait before systems are running again. Together they decide how often we back up and how fast recovery must be.

Does POPIA require businesses to back up data?

POPIA doesn't prescribe a specific backup method, but section 19 requires reasonable technical and organisational measures to prevent the loss of, damage to or unauthorised destruction of personal information. For most businesses, reliable and tested backups are part of meeting that duty. Section 22 adds that security compromises must be reported to the Information Regulator.

Where is my backup data stored?

During your free backup assessment we'll show you exactly where each copy lives, who can access it and how long it's kept, so you can answer your own clients and auditors with confidence.

How much do managed backup services cost?

It depends on how much data you have, how many servers, laptops and Microsoft 365 users need protecting, and how quickly you need to recover. After a free backup assessment we give you a clear monthly quote with no surprises, so you only pay for the protection your business actually needs.

Do you support businesses outside Durban?

Yes. Our head office is at 28 Essex Terrace, Westville, Durban, and dedicated technicians support businesses throughout South Africa. Backups are monitored remotely, so your data is watched over wherever your office happens to be.

Bexie, NETCONFIG's purple cow, keeping an eye on your managed backup services
Moo! A backup you've never restored is just a hopeful guess.

Sleep better tonight Let's check your backups

Tell us a little about your business and we'll show you, in plain English, how well your data is protected today and how our managed backup services could help.