Backup basics for small businesses: the 3-2-1 approach
Why cloud sync isn't backup, how the 3-2-1 approach works, and why restore testing matters more than the backup itself.
By JN CORE TECHNOLOGIES 5 min read
Most small businesses believe their data is backed up. Fewer have ever tried to restore it. Here's how to make sure your backups will actually work when you need them.
Sync is not backup
Services like OneDrive, Dropbox, and Google Drive synchronize files across devices. That's convenient, but it also means that if a file is deleted, overwritten, or encrypted by ransomware, the damage can sync everywhere.
These services do offer some recovery features, such as version history and recycle bins, but they have time limits and aren't designed as a complete, independent backup.
The 3-2-1 approach
A widely used rule of thumb:
- 3 copies of your important data (the original plus two backups),
- on 2 different types of storage,
- with 1 copy kept offsite or isolated from your main systems.
Many businesses today extend this with an immutable or offline copy — one that can't be changed or deleted for a set period, even by an administrator account. That protects you if attackers gain administrative access.
Decide what matters most
Not all data is equal. For each important system, ask two questions:
- How much data can we afford to lose? An hour? A day? This determines how often you back up.
- How long can we be without it? This determines how quickly you need to restore.
Your answers turn into a backup schedule and recovery priorities.
Don't forget cloud services
Your Microsoft 365 email, OneDrive, SharePoint, and Teams data, and data in line-of-business cloud applications, may need their own backups. Check what each provider is responsible for and what's left to you.
Test your restores
A backup you've never restored from is an assumption, not a plan. On a regular schedule:
- Restore a sample of files — and occasionally a whole system — to a safe location.
- Confirm the data is complete and opens correctly.
- Note how long it took.
- Write down what you learned.
Write it down
Keep a short recovery plan: what is backed up, where, who to call, and the order systems should be restored. Store a copy somewhere you can reach if your main systems are down.
Need help designing or testing your backups? See Backup & Disaster Recovery.
This article provides general information, not professional advice for your specific situation. Product names and features change over time; verify current details with the vendor's documentation.
All resources