If an appropriate concept is not created for backup measures, this may lead to business requirements being disregarded for the affected business processes. If the recovery time or backup intervals are not taken into account, this could mean the backups are not suitable for restoring data in the event of a loss.

In addition, the storage medium for a backup can become a preferred target for attack if valuable data from all of an organisation's business processes is stored on it in a condensed format.

Furthermore, organisational deficiencies can lead to situations in which a backup is unusable. For example, if a backup is encrypted and the key for decrypting it is also affected by a data loss, it will not be possible to restore the data. This could happen if the key is not stored separately.