Backup
A backup is a copy of data, files or entire systems that allows the previous state to be restored after an error, attack or outage.
A backup is only as good as its restoration. Many businesses only discover in an emergency that backups are incomplete, outdated or cannot be restored.
The 3-2-1 rule has proven itself: three copies of the data, on two different storage media, one of them at another location. At least one copy should be stored so that an attacker cannot encrypt or delete it as well.
For websites and software, files, databases and configuration are equally part of it — and backups should run automatically, regularly and monitored.
What to look out for
- Define what is backed up: files, databases, configuration, emails.
- Automate backups and monitor their execution.
- Keep at least one copy separate from the system.
- Test restoration regularly.
- Define how long backups are retained.
Common mistakes
- Backups sit on the same server as the website.
- Restoration has never been tested.
- Only files are backed up, not the database.
Frequently asked questions
As often as data loss is bearable: for a shop with daily orders at least daily, for a rarely changed website less often. The key question is how much work may be lost in an emergency.
Often as a basis, but not always. Check what is backed up, for how long, where copies are stored and how quickly restoration is possible.
More in our article: Website security: the basics every business needs