THE BACKUP THAT SAVES YOUR BUSINESS

August 2026 - Cybersecurity / Risk Management

Discover why reliable backups, tested recovery processes and practical education are essential to keeping laboratory production running. Improve resilience →

Cybersecurity is often discussed in technical terms, but for a specialty contact lens laboratory, the real concern is much simpler: if systems become unavailable, how fast can production restart? In our experience, the answer depends less on complex terminology and more on one essential safeguard, an uncompromised backup that can be restored when it is needed.

Cybersecurity Starts with Routine

Most of us learn to brush our teeth at an early age. We do not do it because we expect an immediate problem if we miss one day. We do it because a simple, repeated habit helps prevent more serious problems from developing over time. Cybersecurity works in a similar way. Updates, secure passwords, backups and employee awareness may not appear urgent during a normal working day. Their value becomes clear only when something unexpected happens. Protecting a business requires much more than one simple habit. However, the underlying principle remains true: small, repeated actions are easier and less disruptive than trying to recover after the damage has already been done.

We took everything for granted. Nothing ever happened to us before, so we never really thought it could.

Small Business Owner

The Only Immediate Priority Is Restarting Production

When a laboratory experiences a major system failure, accidental deletion or cyber incident, the technical cause quickly becomes secondary. The immediate concern is operational. Orders still need to be processed. Lathes need to cut lenses. Production teams need to know what to manufacture, how to manufacture it and which jobs should be prioritized. At that moment, the question is not whether the company had a cybersecurity policy. The only real question is... what do we do now?

A Backup Is Not Automatically a Safe Backup

Many laboratories believe they are protected simply because a backup process is running. Unfortunately, having a backup does not necessarily mean the business can recover from it. Backups may be incomplete, outdated, inaccessible or stored in the same environment they intend to protect. In the event of a ransomware attack or other major incident, both the primary data and the backup can be compromised. A reliable backup strategy is therefore about more than creating copies of data. It is about ensuring those copies remain available, intact and ready to restore production when they are needed most.

1. The backup must include all critical production data

2. The backup must remain protected from the incident

3. The backup must be tested to ensure it can be restored

From Having a Backup to Being Ready to Recover

Having a backup is essential to cyber resilience, but it is only the starting point. What really matters is whether the organisation can restore critical systems and return to operations quickly and reliably. Recovery confidence grows when backups are protected and regularly tested, and when clear recovery procedures are supported by trained staff. The chart below illustrates this progression. The percentages are indicative and based on operational experience, showing relative levels of recovery confidence rather than measured probabilities or guaranteed outcomes.

Indicative recovery confidence as backup readiness improve.

Backups Protect Data, Recovery Protects the Business

A backup is a stored copy of information. Cyber resilience is the proven ability to use that information to restore critical operations within an acceptable period. For a contact lens laboratory, this may involve more than recovering individual documents. Depending on the local environment, recovery may need to include order information, production configurations, lens design data, traceability records and the databases used across connected manufacturing processes. The laboratory should also know which systems must be restored first. Recovering every workstation at the same time may not be realistic or necessary. The priority is to identify the minimum environment required to resume controlled production. Any practical recovery plan should answer a small number of simple questions.

1. Which data is essential to production?

2. Where is the protected backup stored?

3. Who is responsible for starting the recovery?

4. Which systems must return first?

Together, these questions form the foundation of an effective backup and recovery strategy. More importantly, they cannot be answered for the first time during an emergency. When production has already stopped, every minute counts, and decisions made under pressure are rarely the best ones. Recovery plans should be defined, documented and tested in advance, so that when an incident occurs, the focus can remain on restoring operations rather than deciding what to do next.

Small Laboratories Face a Particular Challenge

Specialty contact lens laboratories depend heavily on technology. Software supports design, ordering, manufacturing, quality control, traceability and shipping. However, many laboratories are not large enough to maintain a dedicated internal IT department. Responsibility may fall to an external provider, a manager or simply the person within the company who is most comfortable with computers. This is understandable, but it can create a gap between how important the technology is and how formally it is protected. A laboratory may operate highly specialized manufacturing equipment while still relying on backup arrangements that have never been documented or tested. This does not mean every laboratory needs a complex cybersecurity organization. It means every laboratory should establish a minimum recovery baseline appropriate to the importance of its production systems.

I never thought somebody would want to do that to me. I just thought I am too small and too niche.

Small Business Owner

Build Recovery Capability, Not Just Backups

Cybersecurity can seem overwhelming, especially for laboratories without dedicated IT resources. Instead of trying to solve everything at once, focus on the essentials that allow production to recover. The most important step is often the one that's overlooked: testing. A backup should never be considered reliable until it has been successfully restored. A failed test is an inconvenience. A failed recovery during an actual incident can stop production for days.

1. Maintain protected backups

2. Isolate backups from production

3. Test the recovery process

4. Define recovery responsibilities

Cybersecurity Is Not Just an IT Problem

Technology can reduce risk, but employee behaviour remains part of the protection framework. A suspicious email, unexpected login request or unusual system message may be the first visible sign of an incident. Employees do not need to become cybersecurity specialists. They need enough practical knowledge to recognize when something appears unusual, stop before acting and report the situation to the correct person. Education is most effective when it is simple, repeated and connected to the employee’s actual role. A single annual presentation is less valuable than regular reminders and clear reporting procedures.

We had the backup, but when we really needed it, nobody knew what to do, or how to restore it.

Small Business Owner

Warning Signs Should Never Be Ignored

Just as preventive health depends on responding to early symptoms, cyber resilience depends on noticing and acting on operational irregularities. Training and awareness are crucial because the majority of cyber incidents stem from simple mistakes and a lack of understanding among individuals. Key employee errors contributing to these incidents include inadequate password management, improper use of personal email, excessive sharing on social media, and negligent handling of smartphones and collaboration tools. These behaviors underscore the importance of comprehensive training and ongoing awareness programs.

Preparation Protects Production

Good cybersecurity practices help reduce the likelihood of an incident, but no organisation can assume that prevention will always succeed. The practical objective is to ensure that a failure, attack or human error does not permanently remove the information needed to operate. A reliable backup, a tested recovery process and a team that understands how to respond form the minimum foundation of resilience. Like other protective routines, these measures rarely feel urgent during normal operations. Their importance becomes visible only when the business depends on them.

After supporting laboratories through real operational disruptions, one lesson is consistently clear: when production stops, the priority is not understanding every technical detail of the incident. The priority is restoring the systems and information the laboratory needs to work. That is only possible when a protected backup exists and recovery has been tested before the emergency.

Filippo Selden, CEO Advance Medical

AI Developed by Advance Medical with generative AI assistance and substantive human editorial oversight.