Every year, somewhere in the Philippines, a business owner stands in a flooded office looking at a dead server — and feels fine. Because the backup drive is right there on the shelf above it. Then they pick it up, and the water runs out of it too.
Here’s the belief that separates companies that recover from companies that close: a copy of your data in the same room as your data is not a backup. It’s a passenger on the same sinking ship.
The rule that fits in one sentence
The 3-2-1 rule has guided IT professionals for decades because it survives contact with real disasters:
- 3 copies of your data — the original plus two backups.
- 2 different types of media — so one technology’s failure isn’t every copy’s failure.
- 1 copy offsite — outside the building, beyond the reach of whatever happens to it.
Habagat floods, electrical fires, brownout surges, theft — and yes, ransomware — each of these can erase everything in one location in one night. The offsite copy is the difference between a terrible week and a final one.
Why ransomware changed the math
Modern ransomware doesn’t just encrypt your files — it hunts for connected backups and encrypts those first, precisely so you have no choice but to pay. Which is why the modern version of the rule adds one more idea: at least one copy should be immutable or offline — a snapshot that nothing on your network can alter, encrypt, or delete.
With an immutable copy, a ransomware note becomes an inconvenience: you wipe, you restore, you carry on. Without one, it becomes a negotiation with a criminal — and payment, by the way, comes with no guarantee of getting anything back.
The test almost everyone skips
Here’s the uncomfortable question we ask every new client: when did you last restore something from your backup? Not “is the backup running” — backups report success right up until the moment you need them. When did you last get a file back?
A backup you’ve never restored is just a rumor.
Restore testing is the part that turns a backup from a hope into a system. We schedule it like payroll: regular, boring, and non-negotiable. Quarterly at minimum; monthly for businesses where downtime bleeds money by the hour.
Your sixty-second self-check
- If your office flooded tonight, does a complete copy of your data exist somewhere dry?
- If ransomware hit every connected machine, is there a copy it couldn’t touch?
- Can you name the date of your last successful test restore?
- Do you know how many hours a full recovery would actually take?
Four yeses and you’re in rare company. Anything less, and the fix is more affordable than the day it prevents — usually dramatically so. See how we build 3-2-1 backup and tested recovery, or ask us for a backup health check.
CBB Editorial Team
Written by the engineers and consultants of CBB Infotech Solutions Corp — the people who design, deploy, and stand behind these systems every day.
