The simplest backup strategy that survives almost anything, and the one upgrade that makes it survive ransomware too.

If you remember only one thing about protecting your data, make it this: keep 3 copies of your data, on 2 different types of storage, with 1 copy kept offsite. That is the 3-2-1 rule, and it is not a vendor slogan. It is the approach the US Cybersecurity and Infrastructure Security Agency (CISA) recommends, and the quiet standard that IT professionals have trusted for twenty years, because it is simple enough to actually follow and strong enough to survive almost anything that goes wrong.

What makes it clever is that each number defends against a different disaster, so no single event can take all your copies at once. The point is not to own more backups for their own sake. It is that the fire, the theft, the failed drive and the fat-fingered deletion each defeat a different part of a weaker setup, and 3-2-1 is built so that none of them can defeat all three copies together. Here is what each number is actually for.

What the three numbers mean

• 3 copies of your data. The original you work on, plus two backups. One backup is never enough, because the day you need it is the day you discover it failed. Two spares means a second chance.
• 2 different types of storage. Do not keep both backups on the same kind of device. An external drive and the cloud, say. If one whole technology fails or is attacked, the other kind is untouched.
• 1 copy offsite. At least one backup lives somewhere other than your premises. This is the one that saves you from the flood, the fire or the theft that takes the building and everything in it.

Notice that the offsite copy is doing the heaviest lifting. Two backups sitting in the same room as your server feel reassuring, right up until the room floods or burns, and then all three copies are gone together. The offsite copy is what turns a total loss into an inconvenience, which is exactly why it is the part most small businesses skip and most regret.

There is one modern update worth knowing, because ransomware changed the game. The rule has grown to 3-2-1-1-0: the extra 1 is a copy kept offline or immutable, meaning it cannot be altered or deleted even by an attacker inside your network, and the 0 means you have tested a restore and confirmed zero errors. In plain terms: one copy the ransomware simply cannot touch, and proof that your backups actually work before you need them. If 3-2-1 is the foundation, that is the upgrade for the world we operate in now.

The good news is that the hardest parts, the offsite copy and the offline, untouchable one, are exactly what a data centre does for you. BigBand keeps a clean, encrypted copy of your data offsite in its Tier III Cyberjaya facility, separated from your premises and locked so ransomware cannot reach it, which covers the “1 offsite” and the “1 offline” in a single step. Pair that with your own local copies and a tested restore, and you are running the full 3-2-1-1-0 without the headache. Twenty years of doing this locally is what makes that dependable.

Book Your Business Recovery Review
+60 3 5879 3933   |   [email protected]