Backed up isn't the same as back at work.

01 | The data is back
A file, database or other data set has been restored. That's important, but does not prove the business application will run.

02 | The service is back
The application, authentication, configuration and relevant links to other systems are functioning together.

03 | People can work again
An authorised employee can complete a real business task with the correct information: check an order, update a production plan, approve a purchase or prepare a dispatch.

A green backup report may demonstrate the first stage. It does not, by itself, prove the third.

Here's what an interruption can look like beyond IT, depending on the business and its systems.

• Purchasing: Can someone see what has been ordered, what is arriving and what can still be bought?
• Planning: Does the team know which work can go ahead without relying on outdated stock or schedule data?
• Dispatch: Can staff establish what is ready to ship and update the appropriate records?
• Customer service: Can someone give a reliable answer about an order or delivery, rather than an estimate based on yesterday's data?

A service might technically be available again while some of these steps still fail. That's why the recovery outcome needs to be defined with operations as well as IT.

Make UK's August 2026 Cyber Security in Manufacturing research found 30% of surveyed manufacturers had experienced a cyber incident directly or through their supply chain in the preceding year. Among manufacturers affected by cyber attacks on suppliers, 31% reported delayed deliveries to customers. Production downtime and rising operating costs were among the common impacts when incidents caused disruption.¹

A supplier's hosted portal, logistics feed or critical software service may be unavailable even while your own network works. The immediate problem can become missing material updates, uncertain schedules, hurried changes and a customer waiting for an answer.

A useful supplier-continuity check is to ask:

1. Which external service or supplier information would stop a business-critical workflow?
2. What can we do while it is unavailable, and who authorises that workaround?
3. Who verifies any manual changes and reconciles the records afterwards?

These are sector-level findings, not an assertion that any individual manufacturer has an incident or control gap.

¹ Make UK, Cyber Security in Manufacturing, 10 August 2026.

Assured Digital can help map the IT services and access arrangements your team depends on, agree fallback responsibilities and identify practical changes to your own controls. We cannot prevent an incident at a supplier or guarantee their recovery time.

You don't need to be a recovery engineer to ask for sensible evidence:

Which two or three activities must restart first? Start with customer commitments and operational reality.

What is the last complete-service recovery test we actually ran? Ask what an authorised user could do, not only whether the restore finished.

If a critical supplier service is down, who decides what happens next? Name the business owner, IT owner and the fallback.

How do we know staff are working with the correct information when systems return? Agree how updates made during the interruption are checked and brought back into the authoritative system.

For IT leaders, the NCSC's October 2026 guidance explicitly covers data, applications, identity systems, configuration, dependencies and restoration testing. It also addresses reconciling new data created through temporary workarounds.

Recovery and resilience: Review the backup scope, map business IT dependencies, develop sensible recovery priorities and assess suitable restoration tests.

Microsoft and security: Help with identity and access controls, endpoint security, configuration and monitoring, where appropriate to the actual licensing and environment.

Infrastructure and connectivity: Support cloud, servers, networks and workplace systems that business applications depend on.

Information control: Improve how Teams, SharePoint, OneDrive and Microsoft 365 access are organised and governed. Explore the information-control approach.

Boundaries: We do not imply that Assured Digital automatically maintains or restores industrial PLCs, machine controls or other OT systems. Those require specialist scoping and coordination.

Is this a disaster recovery assessment? The exercise and Cyber Health Check are self-guided resources. They are not a technical restore test or assurance certificate.

Does Microsoft 365 backup recover ERP? Not by default. ERP recovery depends on the specific application, database, infrastructure and suppliers involved.

Do you need to replace our existing provider? No. Scoped specialist work can sit alongside an existing team or partner.

Can you assess the production machinery? Not on the basis of this page. Manufacturing OT, control systems and safety requirements need separate specialist agreement.