Security
Backups that work when you really need them
The 3-2-1 rule, regular recovery tests, measuring RPO and RTO — backup isn't a click of a button, it's a system.
A backup you never restored is just hope. A proper backup strategy includes not only creating copies, but also regularly testing their recovery — measuring time and data preservation.
For each critical system, we define the RPO (Recovery Point Objective — how much data we can afford to lose) and the RTO (Recovery Time Objective — how long the system must be operational). These numbers drive the entire backup architecture.
Rule 3-2-1
3 copies of data, on 2 different media, at least 1 off-site. This is the minimum standard — we add an immutable backup (cannot be overwritten by an attacker).
Off-site backups
Off-primary copy — cloud, remote site, or sealed external media. Protection against both physical disaster and ransomware.
Immutable backups
Backups that cannot be overwritten or deleted — neither by administrators nor by ransomware. The last safety net.
Automated monitoring
Each backup job has automatic verification and an alert in case of failure. You won't discover a bad backup until you restore.
Regular recovery tests
Quarterly recovery tests of critical systems measuring actual RTO and RP0. We document the results.
A documented plan
Written Disaster Recovery Plan — step by step, who does what, in what order and with what access data.
Backup vs. RAID
RAID is not backup. RAID protects against disk failure. It will not protect you from:
- ransomware that encrypts files on all drives
- by accidentally deleting or overwriting data
- physical destruction of the server (fire, flood, theft)
- by compromising the administrator account
You need both — RAID for availability and backups for recovery.
Cloud backup
Cloud backups (Azure Backup, AWS S3 Glacier, Backblaze B2) add geographic redundancy at a reasonable cost. Important note: if you have cloud backups, check that:
- the backup agent account does not have access to deletion (Object Lock / immutable)
- backups are encrypted with the client key (not just the cloud provider's key)
- the refresh rate (bandwidth) corresponds to your RTO
How we can help you
We will design a customized backup strategy — for local infrastructure, cloud and hybrid. We set up monitoring, document the recovery plan and test scenarios.
Let's talk it through
Write to us — we will get back within one business day with a concrete next step.