The Backup Strategies That Actually Work

The Backup Strategies That Actually Work

Photo by panumas nikhomkhai on Pexels

Backups are your insurance policy against data loss. Ransomware, hardware failure, accidental deletion, fire, theft — all of these can destroy your business data. A proper backup strategy means you can recover from any of these in hours, not weeks, and sometimes not at all without backups.

Why Most Backups Fail

Here is the uncomfortable truth: most small businesses that think they have backups actually do not have a working backup. They have a process that was set up at some point, runs automatically, and nobody has checked in months or years. When they need it, it fails. Common reasons backups fail:

• Nobody verified the backup was running — The backup software stopped after a server reboot and nobody noticed
• The backup was running but not capturing all data — A new database was added but never included in the backup job
• The backup was stored on the same device as the original data — When ransomware encrypted the server, it also encrypted the backup
• The backup was never tested — The backup files are corrupted, incomplete, or in a format that cannot be restored
• Backup credentials expired — The backup service account password expired and backups silently stopped

The 3-2-1 Backup Strategy

The gold standard for backups is the 3-2-1 rule:

• 3 copies of your data (1 primary + 2 backups)
• 2 different storage media (e.g., local drive + cloud)
• 1 copy stored offsite (in the cloud or at a different physical location)

This strategy ensures that no single failure can destroy all your data. If ransomware hits your server, you have a local backup. If the building burns, you have a cloud backup. If the local backup is corrupted, you have the cloud copy.

Understanding Backup Types

Full Backup

Copies everything. Takes the longest and uses the most storage, but is the fastest to restore from. Most small businesses should do a full backup weekly.

Incremental Backup

Copies only what changed since the last backup. Fast and uses little storage. But restoration is slower — you need the last full backup plus every incremental backup since then. Best for daily backups.

Differential Backup

Copies everything that changed since the last full backup. Middle ground — faster restore than incremental, more storage than incremental. Good for businesses with moderate data volumes.

What Should You Back Up?

Many businesses back up their file server but forget other critical data. Your backup must include:

• File servers — Documents, spreadsheets, images
• Email — If using on-premise email, back up the mail database. If using cloud email (Microsoft 365, Google), verify your provider's backup retention and consider a third-party backup service
• Databases — CRM, accounting, custom applications. These often require special backup procedures — simply copying database files may result in corrupted backups
• Server configurations — Router, firewall, and switch configurations. If hardware fails, you need these to restore the network quickly
• Cloud application data — Microsoft 365, Google Workspace, and SaaS applications. Microsoft and Google have retention policies, but they are not backups. If a user deletes emails or files, they are gone after the retention period. Consider third-party backup for cloud data

Backup Security: Encryption and Immutability

Modern ransomware specifically targets backups. Attackers know that if they can destroy your backups, you have no choice but to pay the ransom. Protect your backups:

• Encrypt backups — Use AES-256 encryption so stolen backup files are useless to attackers
• Use immutable storage — Immutable means "cannot be changed or deleted." Cloud providers offer immutable storage where even an admin cannot delete files for a set period. This protects against ransomware that tries to delete backups
• Offline backups — A backup disconnected from the network cannot be reached by ransomware. Rotate USB drives or tapes weekly
• Backup credentials — Use a separate, dedicated account for backups with a unique password. Do not use an admin account that could be compromised

Free and Low-Cost Backup Tools

• Windows File History / Time Machine (Mac) — Free, built into the OS, good for individual computers
• Proxmox Backup Server — Free, open-source, excellent for backing up VMs and Proxmox environments
• Restic / BorgBackup — Free, open-source, encrypted, efficient for file-level backups to local or cloud storage
• Backblaze B2 + Duplicati — $6/TB/month for cloud storage, Duplicati is a free client that handles encryption and scheduling
• Veeam Community Edition — Free for up to 10 VMs, enterprise-grade backup

Key Takeaways

• Having backups is not the same as having working backups — verification is mandatory
• Follow the 3-2-1 rule: 3 copies, 2 media, 1 offsite
• Ransomware actively targets backups — encrypt and isolate your backup storage
• Cloud services (Microsoft 365, Google) are not backups — their retention is limited
• Free tools can provide enterprise-grade backup if configured correctly