Backups that actually restore: 3-2-1 plus testing

A backup is only real when you can restore.

The baseline: 3-2-1

• 3 copies of important data
• 2 different media (e.g., NAS + cloud)
• 1 offsite (cloud or a different location)

Add the missing part: routine restore testing

Pick a cadence:

• Weekly: restore a single file
• Monthly: restore a folder/app dataset
• Quarterly: full “disaster” restore rehearsal (RTO/RPO)

The anti-ransomware rule

Make sure at least one copy is:

• Immutable (object lock / retention)
• or offline (air-gapped)

Ownership (the most overlooked control)

Define:

• Who receives alerts
• Who approves retention changes
• Who performs the restore test

Need a backup + restore testing plan tailored to your stack? /en/consultation