Data recovery and backup in Des Moines

Choose the work you need

Tell the provider what happened, which devices or accounts hold the missing information, and which files you need first. Include the last known usable backup and any steps you have taken since the loss. Request an assessment of the specific device or system before authorizing recovery work.

For a failed device, ask whether the provider performs the assessment and recovery itself or sends the device to another company. Confirm the destination, who can access the contents, how the provider records transfers, and who returns the original device. Request terms for retaining and deleting working copies of your data.

For suspected ransomware, ask for incident-response capability as part of the scope. CISA advises isolating affected systems, preserving evidence, and investigating the compromise before rebuilding. It cautions that powering down can destroy evidence in volatile memory, so its response sequence prioritizes network disconnection when possible. [3]

Make the recovery quote reviewable

Request separate amounts for assessment, recovery, replacement storage, transport, and any urgent service. Ask which charges apply if the provider cannot recover your priority files. Set a spending limit and require approval before the provider exceeds it or transfers the job elsewhere.

Write down the acceptance test before work begins. Name the folders, date ranges, and business records you need. Ask how you will check that recovered documents open and that your business application can use the restored information. A file listing alone should not be your acceptance test.

Obtain a written quote and estimated assessment and recovery schedules for your device or system. Have the provider state when it will give you the next update. Plan temporary operations around the information it can confirm.

Buy a backup service you can restore

Ask the provider to document what it backs up, how often it copies data, how long it retains versions, and who receives failure alerts. Agree on how much recent work you can afford to lose and how long you can operate without each critical application.

CISA recommends offline, encrypted backups and regular disaster-recovery tests. It explains that ransomware can delete or encrypt accessible backups. Ask the provider to demonstrate how it protects a recovery copy from compromised business accounts and how it restores data after an incident. [3]

Require a sample restore before accepting the setup. Choose a business record and, where relevant, an application restore. Have the provider record the result, explain any missing dependencies, and assign responsibility for future tests. Ask how you will retrieve your data and regain administrative control if you end the service.

CISA recommends phishing-resistant multifactor authentication and limiting third-party access to the provider's responsibilities. Ask who holds backup administrator access, who can delete copies, and how the provider documents its security commitments in the contract. [3]

Prepare for a security incident

CISA describes ransomware incidents that also involve stolen data. If you suspect unauthorized access, engage your IT responder and coordinate forensic and legal work alongside recovery. Ask them to preserve relevant evidence and identify which systems and information the incident affected. [3]

For an Iowa business, record the affected resident count and the date of consumer notification with the person handling legal response. The Attorney General's guidance identifies a state reporting threshold and deadline, and it notes possible federal obligations for some organizations. Do not treat a successful restore as the end of that review. [2]

CISA password-length references for reviewing provider access

Match the situation to the scope

Your hiring checklist

1. List the priority files, applications, devices, and accounts before requesting an assessment.
2. Record the symptoms, last usable backup, and actions taken since the loss.
3. Confirm who performs the work and document any transfer to another company.
4. Request itemized charges, unsuccessful-recovery terms, and an approval limit.
5. Agree on privacy, access, working-copy deletion, and original-device return terms.
6. Define a restore test using records and applications you need to operate.
7. Ask the seller to identify Iowa tax treatment and any applicable business exemption.
8. For a suspected breach, assign separate technical-response and notification responsibilities.

Frequently Asked Questions

Should I shut down computers after discovering ransomware?

CISA prioritizes isolating affected systems from the network. It recommends powering down when you cannot disconnect them to prevent further spread, but warns that shutdown loses potential evidence in volatile memory. Coordinate those steps with your incident responder. [3]

Does my business qualify for tax-free backup storage?

Iowa provides a commercial-enterprise exemption for qualifying electronic storage and other listed purchases under its use conditions. Ask the seller to confirm eligibility and required documentation for your purchase. Do not assume that business ownership makes all recovery services exempt. [1]

How do I check a proposed backup service?

Ask for a restore demonstration, a list of covered data, retention terms, failure-alert responsibilities, and administrator access rules. CISA recommends offline encrypted backups and regular tests of availability and integrity. Include those requirements in the written scope. [3]

Does restoring files settle a breach?

Complete the notification review alongside technical recovery. Iowa's Attorney General describes consumer-notice requirements, a separate Attorney General reporting threshold, and potential federal overlap. Ask your legal adviser to determine which obligations apply to the incident. [2]