---
title: "Data Protection in Business Continuity: 5 Key Questions to Ask"
description: Business continuity professionals can help their organizations raise their data protection game by acting as educators, and advocates.
image: https://bcmmetrics.com/hubfs/Imported_Blog_Media/data-protection.jpg
---
[Skip to content](https://bcmmetrics.com/blog/data-protection#main-content)
SOLUTIONS
[PRICING](https://bcmmetrics.com/pricing)
USE CASES
RESOURCES
[ABOUT US](https://bcmmetrics.com/about-bcmmetrics)
Flexible BCM software solutions
[See all solutions →](https://bcmmetrics.com/business-continuity-solutions)
[ **REGULATORY COMPLIANCE** A self-assessment tool to evaluate the level of compliance of your business continuity program](https://bcmmetrics.com/business-continuity-solutions/compliance-confidence)
[ **BUSINESS CONTINUITY PLANNING** A single platform where you can build and share business continuity plans (BCPS) across your entire team](https://bcmmetrics.com/business-continuity-solutions/bcm-planner)
[ **BUSINESS IMPACT ANALYSIS** An everyday business impact analysis (BIA) software to help you prepare and plan for anything](https://bcmmetrics.com/business-continuity-solutions/bia-on-demand)
[ **FACILITIES MANAGEMENT** An intuitive icon-based mapping tool to better manage your facilities around the globe](https://bcmmetrics.com/business-continuity-solutions/bcm-one)
[**INSURANCE** Identify critical systems and create streamlined response plans](https://bcmmetrics.com/industry/insurance)
[**HEALTHCARE** Simplify compliance and risk assessments in one platform](https://bcmmetrics.com/industry/healthcare)
[**FINANCE** Manage audits and meet standards with ease](https://bcmmetrics.com/industry/finance)
[** CASE STUDIES** Learn how others have redefined their BC management with BCMMetrics](https://bcmmetrics.com/business-continuity-case-studies)
[** RESOURCE LIBRARY** Access our collection of free downloadable resources](https://bcmmetrics.com/business-continuity-resources)
[** BLOG** Read along for expert BC advice from our senior consultants](https://bcmmetrics.com/blog)
[LOG IN](https://app.bcmmetrics.com/Portal/login.aspx) [VIRTUAL TOUR](https://bcmmetrics.com/virtual-tour-form) [BOOK YOUR DEMO](https://bcmmetrics.com/demo)
.png)
.png)
BCM Professionals
# Data Protection in Business Continuity: 5 Key Questions to Ask
Michael Herrera
Published on: February 17, 2022
### Prepare For the Worst with the Best in the Business
Experience capable, consistent, and easy-to-use business continuity management software.
[BOOK YOUR DEMO](https://bcmmetrics.com/demo)
Every organization backs up its data, but not all do so in a manner that is validated or rationally tailored to their needs. Business continuity professionals can help their organizations raise their data protection game by acting as educators, advocates, and brokers on this issue between the business departments and IT.
## A Data Security Conversation with a Client
Here’s a conversation I have frequently with my clients:
Herrera: How are you doing backing up your data?
Client: Perfect! I have all types of backups.
Herrera: Great. How often do you actually validate the data and its integrity?
Client: \[Silence.\]
These days, you could sooner find a person who would admit to not brushing their teeth than you could find a company that would admit to not backing up their data. But not all [data backups](https://bcmmetrics.com/blog/draas-vs-data-backups) are created equal.
## Data Loss Happens All the Time
Organizations lose data all the time. Occasionally this is due to dramatic events like [ransomware](https://mha-it.com/blog/ransomware-defense) attacks. More often it’s the result of everyday glitches like accidental deletions, corruption in the database, and hardware failures.
After experiencing a [data loss](https://mha-it.com/blog/data-loss), organizations turn to their backups and find they are inadequate in terms of keeping their losses within acceptable limits.
## BCM Professionals as Data Protection Guardians
Data is now key for businesses to function. So BC professionals need to include [data protection](https://mha-it.com/blog/data-preservation) in their business continuity plans.
So [business continuity management teams](https://mha-it.com/blog/business-continuity-management-team) need to inquire into the data protection situation for each department. They should facilitate communication on this issue between the business departments and IT, educate the parties about the issue, advocate for the adoption of sound data protection practices, and ensure that the [recovery strategy](https://bcmmetrics.com/blog/eliminating-recovery-strategy-gaps) between business departments and IT is clear.
## Five Key Questions to Improve Data Protection
While BCM professionals don’t usually have hands-on control on data, but you can and should advocate that steps be taken to improve data protection and boost the organization’s resiliency.
To help you to do that, here are five key questions to ask.
### 1. How is data backed up?
Most people in the business departments have no idea how IT backs up their data.
The departments should be encouraged to take an ownership position with regard to their data. It’s their information.
That data is vital for each department to do their job, so they need to know how IT looks after it.
Knowing how their data is backed up can bring many benefits.
- It can shape their behavior in ways that reduce the likelihood of data loss,
- Help them be realistic about what can be recovered in the event of a loss,
- Enable them to talk intelligently with IT.
It’s also a necessary starting point for strengthening their department’s data protection regimen.
### 2. How much data can be permanently lost?
Every department needs to figure out its maximum allowable data loss. This is the limit to how much data can be lost for them to keep working.
This loss is usually measured in an increment of time, e.g., 15 minutes, four hours, or 24 hours. Factors driving this limit can include legal or regulatory requirements or work volume issues.
### 3. How does IT’s data protection align with what the department needs?
Facilitate an exchange of information between the department and IT about the maximum allowable data loss, the reasons for it, and the current level of data protection offered by IT.
This discussion requires the department saying what it needs in terms of data protection and IT saying what it can currently do for the department.
### 4. How can we improve our current data protection processes?
As a BCM professional, you should mediate the discussion of the level of data protection each department gets,
This is easier said than done in many cases. Sometimes IT takes pride in its systems and procedures and is resistant to the idea that it provides insufficient backup protection. (This is commonly expressed as, “Have the people in that department lost their minds?”)
Sometimes IT lacks sufficient storage space or other resources to provide the level of protection desired. In some situations, it might easily be able to meet the department’s needs. In others, the department might need to implement some kind of workaround to close the gap (such as by logging some information manually as a backup in case data is lost).
A diplomatic and well-informed BC professional can make an important contribution by helping the parties negotiate their differences and close the gap.
### 5. How can we validate all data backups?
Encourage the department and IT to validate the data backup and any workarounds.
It’s not enough to have a backup. The backup has to be tested and proven to work. During a data loss is the worst possible time to find out the measures you’ve been relying on all this time to safeguard your data don’t actually function the way they are supposed to.
By getting answers to these five key questions, the BCM office can do its best to push the organization to raise its data protection game.
## Advocating for Better Data Protection
Every organization backs up its data, but relatively few do so in a manner that is rationally tailored to their needs or tested and validated to be sure it works. As a BCM professional, you can help by becoming advocates for better data protection.
To support you better and to improve your business continuity planning and protection, you can also use BCM software, such as [BCMMetrics](https://bcmmetrics.com/).
Our [business continuity software](https://bcmmetrics.com/business-continuity-solutions) was developed by the experts at [MHA Consulting](https://bcmmetrics.com/about-bcmmetrics) and provides you with four easy-to-use modules with flexible [pricing](https://bcmmetrics.com/pricing) to improve your [BIA reporting](https://bcmmetrics.com/business-continuity-solutions/bia-on-demand), [BCM planning](https://bcmmetrics.com/business-continuity-solutions/bcm-planner), [facility mapping](https://bcmmetrics.com/business-continuity-solutions/bcm-one), and to analyze your [compliance](https://bcmmetrics.com/business-continuity-solutions/compliance-confidence) with industry frameworks and legislation.
Do a [virtual tour](https://bcmmetrics.com/virtual-tour-form) to understand how it works.
## "Business resilience means adapting swiftly, turning challenges into stepping stones for success."
Michael Herrera
---
#### Michael Herrera
Michael Herrera is the Chief Executive Officer (CEO) of MHA. In his role, Michael provides global leadership to the entire set of industry practices and horizontal capabilities within MHA. Under his leadership, MHA has become a leading provider of Business Continuity and Disaster Recovery services to organizations on a global level. He is also the founder of BCMMETRICS, a leading cloud based tool designed to assess business continuity compliance and residual risk. Michael is a well-known and sought after speaker on Business Continuity issues at local and national contingency planner chapter meetings and conferences. Prior to founding MHA, he was a Regional VP for Bank of America, where he was responsible for Business Continuity across the southwest region.
## Other resources you might enjoy
#### [Run It Like a Business: 7 Tips to Help Your BCM Program Succeed](https://bcmmetrics.com/blog/run-it-like-a-business-7-tips-to-help-your-bcm-program-succeed)
Michael Herrera
[Read More](https://bcmmetrics.com/blog/run-it-like-a-business-7-tips-to-help-your-bcm-program-succeed)
#### [Chaos Engineering and Disaster Recovery](https://bcmmetrics.com/blog/chaos-engineering-and-disaster-recovery)
Michael Herrera
[Read More](https://bcmmetrics.com/blog/chaos-engineering-and-disaster-recovery)
#### [The Metrics System: How to Use Metrics to Improve Your BCM Program](https://bcmmetrics.com/blog/improve-bcm-program)
Michael Herrera
[Read More](https://bcmmetrics.com/blog/improve-bcm-program)
## Ready to start focusing on higher-level challenges?
### 
3820 W Happy Valley Road
Glendale, AZ 85310
USA
[SOLUTIONS](https://bcmmetrics.com/business-continuity-solutions)
- [Regulatory Compliance](https://bcmmetrics.com/business-continuity-solutions/compliance-confidence)
- [Business Impact Analysis](https://bcmmetrics.com/business-continuity-solutions/bia-on-demand)
- [Business Continuity Planning](https://bcmmetrics.com/business-continuity-solutions/bcm-planner)
- [Facilities Management](https://bcmmetrics.com/business-continuity-solutions/bcm-one)
PRICING
- [Our Pricing Model](https://bcmmetrics.com/pricing)
RESOURCES
- [Case Studies](https://bcmmetrics.com/business-continuity-case-studies)
- [Resource Library](https://bcmmetrics.com/business-continuity-resources)
- [Blog](https://bcmmetrics.com/blog)
COMPANY
- [About us](https://bcmmetrics.com/about-bcmmetrics-old)
- [Contact](https://bcmmetrics.com/demo)
- [MHA Consulting](https://www.mha-it.com/)
© 2026 BCMMetrics. All rights reserved. [Privacy Policy](https://bcmmetrics.com/privacy-policy)
```json
{
"@context" : "",
"@type" : "BreadcrumbList",
"itemListElement" : [ {
"@type" : "ListItem",
"item" : "https://bcmmetrics.com",
"name" : "Home",
"position" : 1
}, {
"@type" : "ListItem",
"item" : "https://bcmmetrics.com/blog",
"name" : "Blog",
"position" : 2
}, {
"@type" : "ListItem",
"name" : "Data Protection in Business Continuity: 5 Key Questions to Ask",
"position" : 3
} ]
}
```
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Michael Herrera",
"url" : "https://bcmmetrics.com/blog/author/michael-herrera"
},
"dateModified" : "2025-06-17T00:07:07.740Z",
"datePublished" : "2022-02-17T11:50:15.000Z",
"headline" : "Data Protection in Business Continuity: 5 Key Questions to Ask",
"image" : [ "https://bcmmetrics.com/hubfs/Imported_Blog_Media/data-protection.jpg" ],
"mainEntityOfPage" : {
"@id" : "https://bcmmetrics.com/blog/data-protection",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://bcmmetrics.com/hubfs/Group%201171274345.svg"
}
}
}
```