Short answer:The 3-2-1 rule means you havethreecopies of your data, ontwodifferent types of storage, of whichastored in another physical location (or disconnected). It's the simplest strategy that actually protects you against everything from broken hard drives to ransomware.

Why do I need a backup strategy?

Most people only think about backup when it is already too late. But data is lost in more ways than you think: hard drives break, someone deletes the wrong file, a computer is stolen – or a ransomware attack strikes and encrypts everything and demands a ransom. A single backup is rarely enough, because it can suffer from exactly the same problems as the original.

The 3-2-1 rule solves that by spreading the risks. It's not advanced - and that's the whole point. A strategy you can actually stick to is worth more than a perfect plan that never works.

What do 3, 2 and 1 mean?

3 – three copies

Count on the original plus two backups. Three copies means that if one or even two are knocked out, there is still one left. A single extra copy feels safe but is surprisingly fragile.

2 – two different types of storage

Do not save all copies on the same type of media. For example, mix internal disk with external hard drive, or local storage with cloud storage. If an entire type is knocked out – say a power spike takes your disks – the other type will survive.

1 – a copy in another location

At least one copy must be located somewhere other than where the original is. It protects against fire, flood, theft and burglary. In practice, this is where cloud storage usually comes in, as it is automatically located in a different location.

An important nuance in ransomware times: at least one copy should be disconnected or write-protected (so-called offline or offsite backup). An attack that encrypts your computer should not be able to reach and encrypt your backup as well.

How does 3-2-1 protect against ransomware?

Ransomware is malicious code that locks your data and demands money to unlock it. The nasty thing is that modern ransomware actively seeks out and destroys backups that are connected – just to force a payment.

With 3-2-1 you have a copy that is separate and disconnected. Then you can ignore the ransom demand, wipe the system clean and restore from your safe copy. It's the difference between a busy afternoon and a disaster that threatens the entire company.

What are people missing?

  • They never test recovery.A backup you've never tried to restore is just a hope. Test at least once a year.
  • They secure the wrong things.Think through what is actually critical: customer data, accounting, contracts, source code.
  • They run everything in one place.Three copies in the same room do not protect against fire.
  • They forget cloud services.The fact that your data is in the cloud does not automatically mean that it is backed up - check what the provider actually promises.

That's how you get started - four steps

  1. List your most important data.What would hurt the most to lose?
  2. Arrange three copies on two types of storage.For example server, external disk and cloud.
  3. Put a copy in another place and preferably disconnected.
  4. Schedule and test.Automate the backup and try recovery regularly.

Do you want a backup you can trust?

At ZORC, we help companies protect their data – from backup routines and secure storage to protection against ransomware. We set up a 3-2-1 solution that suits your business and make sure it actually works when it matters. Get in touch with ZORC, and we will review how protected your data is today.