Home Compliance & Certification Non-Critical Backup Screenshot Guide

Non-Critical Backup Screenshot Guide

Last updated on Sep 25, 2025

1. Purpose of this Guide

This artefact proves your company doesn’t only protect the “crown jewels” but also keeps less critical data backed up. Cyber Essentials requires this because even non-critical systems can contain information that, if lost, could disrupt operations. Having a backup — even at lower frequency — shows resilience across the board.

2. What You Will Submit

You will need:

  • A screenshot showing:

    • Backup settings for non-critical systems (e.g., shared drives, test servers, archive data).

    • Frequency (e.g., weekly, monthly) clearly configured.

    • Destination storage (cloud, NAS, external drive).

    • Timestamp or status proving recent activity.

3. How to Collect / Obtain / Generate This Evidence

Option A: Cloud Backup Services (e.g., OneDrive, Google Drive, Dropbox):

  1. Open the admin or settings panel.

  2. Navigate to Backup / Sync Settings.

  3. Screenshot showing folders/files designated as non-critical with backup frequency.

Option B: Backup Software (e.g., Veeam, Acronis, Datto):

  1. Log into the admin console.

  2. Go to Backup Jobs / Policies.

  3. Screenshot the configuration showing weekly/monthly backup jobs for non-critical systems.

Option C: Local/On-Premise NAS or External Storage:

  1. Open the backup scheduler interface.

  2. Capture the job list showing less frequent backups (e.g., archives every 2 weeks).

  3. Screenshot with timestamps of last and next backup.

4. Evidence Format

  • Accepted file types: PNG, JPG, PDF.

  • Suggested naming format:
    YourCompanyName_NonCriticalBackup_YYYY-MM-DD.png

5. What “Good” Looks Like

  • Screenshot clearly shows non-critical data included.

  • Backup frequency lower than critical systems (e.g., monthly vs daily).

  • Shows destination where backups are stored.

  • Timestamp/logs prove backup is active and not stale.

Why it matters: auditors want evidence that your company covers all data tiers, not just critical files, while optimising resources responsibly.

6. Tips

  • Label non-critical jobs clearly (“Archive Data Weekly Backup”) to avoid confusion.

  • Redact sensitive file/folder names if shown.

  • Pair with your Business Critical Backup evidence to demonstrate a balanced backup strategy.