Cloud Backup, Disaster Recovery, and the 3-2-1 Rule – How to Not Lose Your Data
A ransomware attack encrypts a small business's only copy of customer data. A hard drive fails, and the owner never backed up family photos. A fire destroys an office server room. These events are devastating but almost always preventable. In this post, we will cover practical cloud-based backup and disaster recovery.
1. The 3-2-1 Backup Rule – The Golden Standard
|
Part |
Meaning |
Example |
|
3 copies |
The original plus two backups. |
Working copy on laptop, backup on external drive, second backup in cloud. |
|
2 different media |
Not all backups on the same type of device. |
One on external HDD, one on cloud object storage. |
|
1 offsite |
A copy physically separate from the primary location. |
Cloud storage in a different region; or a hard drive stored at a friend's house. |
If your office burns down, on-site backups may be destroyed alongside the original. A cloud backup stored hundreds of miles away survives.
2. Backup vs. Disaster Recovery
|
Aspect |
Backup |
Disaster Recovery (DR) |
|
What it protects |
Data (files, databases, photos) |
Entire IT systems (servers, networks, applications) |
|
Goal |
Restore a specific file or folder |
Restore full operations after a major outage |
|
Time to restore |
Minutes to hours |
Hours to days |
3. What to Back Up – Prioritize
|
Priority |
Type |
Examples |
Backup frequency |
|
Critical |
Cannot be recreated |
Financial records, customer databases, family photos |
Continuous or daily |
|
Important |
Time-consuming to recreate |
Project files, configuration files, source code |
Daily or weekly |
|
Replaceable |
Can be re-downloaded or reinstalled |
Operating system, applications, streaming movies |
Do not back up |
4. Cloud Backup Options
- Cloud Storage Sync (Google Drive, Dropbox, OneDrive, iCloud): Simple and automatic, but not true backup. Accidental deletion syncs to the cloud (though most services have 30-day file recovery). Best for active working files.
- Dedicated Cloud Backup (Backblaze Personal, Carbonite, Acronis): Set and forget. Retains multiple versions. Ransomware protection (restore previous versions). Monthly fee ($5–10 per computer). Best for home users and freelancers.
- Object Storage + Backup Software (AWS S3, Backblaze B2, Wasabi with Duplicati or Rclone): Very cheap (as low as $0.005/GB/month for Glacier Deep Archive). Requires technical setup. Best for tech-savvy users or small businesses with more than 1 TB data.
5. Ransomware – Why Backups Are Your Last Defense
Ransomware encrypts your files and demands payment. If you have a backup not connected to the infected machine, you can wipe and restore.
- Cloud backup with versioning: Restore from a date before the encryption occurred. Backblaze keeps 30 days of versions.
- Offline backup: An external drive physically disconnected except during backup. Ransomware cannot encrypt a disconnected drive.
- Immutable storage: AWS S3 Object Lock and Backblaze Object Lock mark backups as immutable for a period. Even if an attacker gains access, they cannot delete or alter those backups.
6. Common Backup Mistakes
|
Mistake |
Why it is bad |
Fix |
|
Only one backup (kept next to computer) |
Fire or theft destroys both original and backup. |
Offsite copy (cloud or friend's house). |
|
Not testing restores |
You discover your backup is corrupt only when you need it. |
Test restore a random file every month. |
|
Using only cloud sync (Dropbox) for backup |
Accidental deletion or ransomware syncs to cloud. |
Use dedicated backup with versioning. |
|
No backup for encryption keys |
You forget passwords and lose access. |
Store encryption keys in a password manager and print a physical copy. |
7. Simple Cloud Backup Plan – Step by Step
- Choose a backup provider. For most users: Backblaze Personal ($7/month) is simple and unlimited.
- Install and configure. Select drives/folders to back up. Exclude system folders and temporary files.
- Enable encryption using a strong password stored in your password manager.
- Wait for initial upload – this may take days for large amounts of data.
- Test a restore by restoring a small file to a different folder to verify it works.
- Set up a second local backup using Windows Backup or macOS Time Machine for faster restores.
- Check backup status weekly. Ensure no errors.
Summary
|
Term |
Definition |
|
3-2-1 backup rule |
3 copies, 2 media types, 1 offsite. |
|
RTO (Recovery Time Objective) |
Maximum acceptable downtime after a disaster. |
|
RPO (Recovery Point Objective) |
Maximum acceptable data loss (time since last backup). |
|
Ransomware |
Malware that encrypts files and demands payment. Backups defeat it (if not also encrypted). |
|
Immutable storage |
Cloud storage that prevents deletion or modification for a set period. |
Review Questions
- A user stores all their photos in Google Drive and deletes the local copies. Does this satisfy the 3-2-1 rule? Why or why not?
- You are hit by ransomware. Your cloud backup agent just uploaded the encrypted versions. How can you still recover?
- What is the difference between RTO and RPO?