Business backups: the 3-2-1 rule

A failed disk, a stolen laptop, ransomware or an accidental deletion: sooner or later every business needs to recover data. What matters then is having a backup that works.

Guide · 6 min read · Updated

The 3-2-1 rule

  • 3 copies of your data: the original plus two copies.
  • 2 different media: for example a NAS and an external drive or a cloud service.
  • 1 copy off-site, so a fire, flood or theft doesn't take everything.

Today there's one more recommendation: at least one copy should be immutable or offline, meaning it can't be deleted or encrypted from the network, so it survives ransomware.

What to back up

  • Working files and shared folders.
  • Application databases: CRM, invoicing, private cloud.
  • Email, if your provider doesn't already protect it.
  • Device configurations: router, firewall, home automation, camera recorder.

Common mistakes

  • Mistaking RAID for a backup: RAID protects against a disk failure, not deletion or ransomware.
  • Syncing isn't backing up: delete a file in a synced folder and it's deleted in the cloud too.
  • Never testing a restore: you don't know an untested backup works.
  • Backups that depend on someone: the external drive you plug in "when I remember".

How we approach it

Automatic, scheduled backups, alerts if one fails, a copy kept off the premises and regular restore tests. All documented, so you know what's backed up, where and for how long.

Frequently asked questions

How often should I back up?

It depends on how much work you can afford to lose. For most businesses an automatic daily backup is the reasonable minimum; data that changes constantly is backed up more often.

Connect · Protect · Automate · Control

Tell us about your project

We look at what you need and propose a complete solution: one company, one point of contact, one project.