The 3-2-1 backup rule
Continuity · Sep 15, 2026
Many companies think they're protected because they "do backups". But when the moment of truth arrives — a dead disk, ransomware that encrypts everything — they find the copy was incomplete, old, or on the same machine that failed. The 3-2-1 rule avoids that blow.
What the rule says
- 3 copies of important information (the original plus two backups).
- 2 different media (for example, a local disk and the cloud).
- 1 copy off-site (another location or the cloud), to survive theft, fire or flood.
The step everyone forgets: testing the restore
A backup you've never restored isn't a backup, it's a hope. At least once a quarter it's worth recovering some files to confirm the process works and you know how long it takes.
Why it matters against ransomware
Ransomware encrypts your files and demands a ransom. If you have an offline or immutable copy, you don't depend on paying: you restore and move on. That's why the "off-site" copy ideally can't be modified by the same infected machine.
How we do it at LoTek
We set up automatic backups, with a cloud copy, and schedule periodic restore tests so there are no surprises. Take the self-assessment to see where your company stands today.