Ransomware Recovery Pack
Prove you could recover from ransomware - immutable, restore-tested backups of both your Microsoft 365 and Microsoft Azure data, with a recovery you have actually rehearsed, not just configured.
A short call to scope the Microsoft 365 and Azure data in scope and your recovery targets. No obligation.
The problem
Cyber-insurance no longer accepts 'we have backups' - it asks for immutable backups an attacker cannot delete, and evidence that a restore has actually been tested. Two gaps are common. Microsoft 365 has no real native backup - the retention people assume is a backup is not one, and ransomware or a malicious admin can wipe mailboxes, SharePoint, and OneDrive with nothing to restore from. And Microsoft Azure backups are often present but never made immutable and never restore-tested, so nobody knows they would hold until the day they are needed. The fix is one recoverable position across both: immutable, tested backups of Microsoft 365 and Microsoft Azure, and a restore you have rehearsed and can evidence.
What's Included
- Microsoft 365 backup (Exchange Online, SharePoint, OneDrive, and Teams) using a proven third-party backup platform - the coverage Microsoft 365's native retention does not provide
- Microsoft Azure backup using built-in Azure Backup with immutable vaults and soft delete, so backups cannot be deleted by an attacker or a compromised admin
- Immutability and retention set to survive a ransomware event - backups an attacker who owns your tenant still cannot destroy
- A demonstrated, documented restore of representative Microsoft 365 and Azure data - proof it works, not just that it is configured
- A recovery runbook and an evidence pack mapping the controls to the backup and recovery questions on your insurer's questionnaire
- The Azure backup configuration defined as infrastructure-as-code (Terraform), so the position is repeatable
What This Assumes
- A chosen third-party Microsoft 365 backup platform - recommended at scoping if you have none - and agreed retention and recovery targets (RPO and RTO)
- Administrative access to Microsoft 365 and Microsoft Azure, and a representative dataset to restore-test against
Not Included
- The third-party backup platform subscription and Azure Backup storage - recurring costs borne by you; the pack configures and proves them
- Live incident response or active-ransomware remediation, on-premises backup, and data outside Microsoft 365 and Microsoft Azure
Outcomes
- One recoverable position across both Microsoft 365 and Microsoft Azure - not backups on one and a blind spot on the other
- Immutable backups a ransomware attacker cannot delete, and a restore you have actually proven
- The backup and recovery controls on a cyber-insurance questionnaire evidenced, not asserted
- A rehearsed recovery runbook, so an incident is a procedure rather than a panic
Who It's For
- Finance, insurance, and regulated teams whose cyber-insurance renewal presses on immutable, tested backups
- Organisations that assume Microsoft 365 retention is a backup - it is not - and want real, recoverable coverage
- IT and security leads who need to prove a restore works before an incident, not during one
How to Start
Most engagements begin with the free audit and go no further until you have seen where you stand.
The Ransomware Recovery Pack
from £7,000 / $9,000
A fixed-scope engagement that puts immutable, restore-tested backups across Microsoft 365 and Microsoft Azure, and proves a recovery.
- Microsoft 365 backup via a proven third-party platform, and Microsoft Azure backup with immutable vaults
- A demonstrated restore of representative Microsoft 365 and Azure data
- A recovery runbook and an evidence pack for your insurer's backup and recovery questions
Guarantee: a full restore of the agreed Microsoft 365 and Azure data demonstrated and evidenced, or we keep working free.
Continuous Evidence
from £3,500 / $4,500
An ongoing retainer that keeps immutability, retention, and restore tests current, and the recovery evidence submittable as your estate changes.
- A fixed amount of expert time each month on backup, immutability, and recovery testing
- Periodic restore tests, so the evidence stays current between renewals
- A forward plan reprioritised every month
Month one: a backup baseline and a first restore-test evidence pack.
Engagement Model
A fixed-scope engagement: immutable, restore-tested backups across Microsoft 365 and Microsoft Azure, agreed as a written scope and a fixed price before work starts - no day rates. And it is guaranteed: a full restore of the agreed Microsoft 365 and Azure data is demonstrated and evidenced, or we keep working at no extra charge until it is. And it graduates into Continuous Evidence, so immutability and restore tests stay current inside the retainer - the recovery evidence never lapses between renewals.
Pricing: from £7,000 / $9,000 - larger engagements are tailored to scope.
We govern the AI we deliver with
This work is delivered AI-accelerated, so AI tooling reads configuration data from your estate along the way. It is fair to ask how that is governed - and the answer is published: which providers we use and on what commercial terms, what client data never reaches a model, that a named architect signs off every output, and that AI tooling holds no standing write access to client systems.
Read our AI policyRelated
The Cyber-Insurance Renewal Pack
Immutable, tested backups are one control on a wider questionnaire. The renewal pack covers the whole thing, guaranteed before your date.
Microsoft Azure Security & Hardening
The platform hardening the Azure side of your backups sits on - identity, network, and workload controls.
Microsoft 365 Security & Hardening
The identity, device, and data hardening that reduces the chance you ever need the recovery. Start with a free posture audit.
Ransomware Restore-Proof Checklist
Want to check yourself first? The free checklist of what an insurer means by immutable, and what a restore test has to produce to count as evidence.
Cyber-Insurance Readiness Checklist
Immutable, tested backups are one line on the insurer questionnaire. The free checklist maps the rest to your Microsoft 365 and Azure estate.
Get started
Find out where you stand, free
Most engagements start with a no-cost posture audit against the baselines that matter to you. If a fixed-fee roadmap is the right next step, we'll say so - and if it isn't, we'll say that too.