"State of the art" is used in contracts, required by the GDPR, and referenced in laws. The European Union Agency for Cybersecurity (ENISA) has defined the state of the art for cloud-based data exchange and data storage in the cloud, but the concept is only half-heartedly lived and implemented. In the future, it will be important to rethink and adopt a data-centric approach to security, where the essentials - the data itself - are protected, as recommended by ENISA. We show what data-centric security can look like in the context of endpoint backups in the cloud - using the example of a large international company with 80,000 users. The new cloud backup is not only significantly more cost-effective, stable, and secure than the previous backup solution, but also corresponds to the state of th ...