Backups are not a product you buy once and forget. They are a process: copy data, store it safely, and prove you can restore it. When ransomware, theft, fire, or human error hits, the question is not “did we have a backup?”—it is “when did we last restore successfully?”
The 3-2-1 idea in plain language
- 3 copies of important data (production + 2 backups)
- 2 different media or systems (for example local appliance + cloud)
- 1 copy offline or immutable so ransomware cannot encrypt every copy at once
Common SMB backup mistakes
- Only one external drive that stays plugged in 24/7 (ransomware encrypts it too)
- Cloud sync (OneDrive/Google Drive) treated as a full backup—without version history understanding
- Never testing restores; discovering corruption during a real emergency
- No backup of Microsoft 365 / Google Workspace mail and drive (vendor uptime ≠ your deleted-item recovery plan)
What good looks like
- Automated daily backups with monitoring for failures
- Retention that matches legal and operational needs
- Documented restore steps for a single file, a full PC, and a server
- Quarterly restore tests recorded for leadership
See our managed backups service page and related reading on the importance of cloud backups.
Need help putting this into practice for your business? Contact SabatAge or call (845) 475-8468. We support Hudson Valley and Orange County businesses with practical security and managed IT.
No responses yet