Backup Fundamentals
Backup is the practice of creating copies of data so it can be restored after loss, corruption, or disaster. It covers backup types, scheduling, retention policies, storage targets, verification, and the recovery procedures that determine whether backups actually work when needed.
itStorage, backup, and data protection | OpenSkills.info
Course pathWalk it in order
Look it upDip in anytime
Go furtherLeaves this page
Don't Panic
Don't Panic — Backup Fundamentals
Backup means a recovery copy, not a pile of files that has been politely moved somewhere else. Without it, the live state is the only state. That arrangement works right up to the point when deletion, corruption, failure, or an attacker gives the live state an abrupt personality change. The useful question is whether a chosen copy can return the required service, not whether a job has acquired a reassuring green badge.
The first two useful abbreviations are RPO, the point in time to which data must return, and RTO, the time recovery may consume before the outage becomes unacceptable. They answer different questions, because the universe has declined to make data loss and downtime the same problem. Retention then says how long older recovery points remain available. Set all three per workload: a transaction database and a disposable cache do not deserve the same recovery arrangement merely because they occupy neighboring rows in a console.
A restore needs more than the data that first comes to mind. Configuration, infrastructure definitions, keys, certificates, licenses, catalogs, identity dependencies, and documented procedures can all be part of the recoverable system. Consistency matters when related data changes together. A restored database with the wrong configuration is not a victory; it is a collection of correct bytes having an unproductive afternoon.
The usual design shorthand is 3-2-1: three copies including production, two storage systems or media types, and one offsite copy. Count the failure domains after counting the copies. A separate location that shares the same administrator identity, deletion authority, management path, or recovery key has not achieved the independence its storage diagram may be claiming. Offline and immutable copies address destructive threats. Encryption protects confidentiality. Each is useful, and none quietly performs the others' job.
The trick is that a completed backup job proves only that one step happened. Restore is the real examination: find the recovery point, retrieve it, read it, decrypt it, satisfy dependencies, start the application, and validate the result. The practice reference gives you a safe synthetic restore to make that chain visible. The exercise turns it into a measured recovery record. Use the intro for the full design, the slides for the relationships, and the cheatsheet when the next green job needs a less flattering question.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://csrc.nist.gov/glossary/term/backup
Supports
- Backup as a copy of files and programs made to facilitate recovery
- Recovery purpose as the defining property of a backup
- https://csrc.nist.gov/glossary/term/recovery_point_objective
Supports
- Recovery point objective as the point in time to which data must be recovered after an outage
- https://csrc.nist.gov/glossary/term/recovery_time_objective
Supports
- Recovery time objective as the recovery duration limit before mission or business impact
- https://csrc.nist.gov/pubs/sp/800/34/r1/upd1/final
Supports
- Business impact analysis, recovery point objective, and recovery time objective
- Backup frequency and scope based on criticality and change rate
- Full and incremental backup planning
- Backup location, media rotation, offsite storage, retention, retrieval, and authorization decisions
- Regular backup-media testing and restoration through contingency exercises
- Secure offsite storage and separation from the primary site
- System configuration, documentation, software, licenses, and other recovery dependencies
- Encryption considerations for backup information in transit and at rest
- Recovery procedures, roles, service priority, and plan maintenance
- https://csrc.nist.gov/pubs/sp/800/123/final
Supports
- Full, incremental, and differential backup definitions
- Backup-time, resource, storage, and restore-chain tradeoffs
- Backup frequency factors including change rate, criticality, data type, capacity, and threat level
- Replication for highly dynamic data and its relationship to standard backups
- Server data, operating system, application, configuration, and log backup scope
- https://www.cisa.gov/sites/default/files/publications/data_backup_options.pdf
Supports
- The 3-2-1 rule as three copies, two media types, and one offsite copy
- Local, removable, and remote backup options and their security considerations
- Multiple copies as protection against loss or corruption
- https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final
Supports
- System backup control for user data, system data, and documentation
- Backup frequency consistent with recovery point and recovery time objectives
- Reliability and integrity testing of backup information
- Separate storage for critical information and protection of backup confidentiality, integrity, and availability
- Restoration as part of contingency-plan testing
- https://www.cisa.gov/stopransomware/ransomware-guide
Supports
- Offline encrypted backups of critical data
- Regular testing of backup availability, integrity, and procedures
- Ransomware attempts to delete or encrypt accessible backups
- Threat actors targeting backup credentials and unpatched backup solutions
- Recovery from clean offline backups in priority order
- Golden images, infrastructure definitions, source, executables, and license material as recovery assets
- https://csrc.nist.gov/pubs/sp/800/184/final
Supports
- Recovery planning based on resource identification and prioritization
- Realistic recovery test scenarios and preparation for rapid recovery
- Tactical and strategic recovery playbooks, testing, metrics, and improvement
- Recovery as a broader people, process, and technology capability
- Lessons from exercises and incidents as inputs to recovery improvement
- https://www.nccoe.nist.gov/publication/1800-11/VolB/
Supports
- Secure storage through write protection or encryption
- Backups for files, disks, virtual environments, and databases
- Identification of a last-known-good point before restoration
- Backup frequency, resource, and restoration-granularity tradeoffs
- Recovery of modified, corrupted, and deleted data
- Immutability as protection from malware and accidental deletion
- https://csrc.nist.gov/pubs/sp/1339/final
Supports
- Operational technology backup strategy
- Integration of backups with change management
- Regular creation, testing, and review during recovery exercises
- Operational downtime and safety as sector-specific recovery concerns
- https://www.veeam.com/products/veeam-data-platform/backup-recovery.html
Supports
- Veeam Data Platform backup, immutable repository, verified recovery, and hybrid-workload capabilities
- https://www.commvault.com/platform/backup-and-recovery
Supports
- Commvault Cloud Backup & Recovery protection across cloud, on-premises, SaaS, and hybrid workloads
- https://www.rubrik.com/products
Supports
- Rubrik Security Cloud immutable backups, clean recovery points, and cyber-recovery capabilities
- https://www.cohesity.com/platform/dataprotect/
Supports
- Cohesity DataProtect unified backup, immutable snapshots, and recovery capabilities
- https://www.ibm.com/products/storage-protect
Supports
- IBM Storage Protect backup, recovery, incremental-forever, storage-target, and retention capabilities
- https://www.acronis.com/en/products/cyber-protect/
Supports
- Acronis Cyber Protect backup, recovery, endpoint, remote-site, and operational-technology capabilities
- https://www.cohesity.com/platform/netbackup/
Supports
- NetBackup hybrid backup, immutability, last-known-good recovery, and recovery-rehearsal capabilities
- https://docs.cloud.google.com/architecture/framework/reliability/perform-testing-for-recovery-from-data-loss
Supports
- Recovery tests measured against data integrity, recovery point objective, and recovery time objective
- Restoration testing of the full application stack and critical infrastructure services in a non-production environment
- https://cloud.google.com/blog/products/management-tools/shrinking-the-time-to-mitigate-production-incidents
Supports
- Coordinated disaster-recovery tests that exercise technical systems, roles, communication, and rollback planning
