How to Back Up Your Business Data: The 3-2-1 Rule Explained Simply

Every business eventually meets one of them: the stolen laptop, the dead hard drive, the ransomware note, the accidental delete, the flooded office. The businesses that survive the meeting are the ones whose data exists in more than one place. Backup is the least glamorous investment in your business and the only one whose entire job is saving all the others.

What is the 3-2-1 rule?

The 3-2-1 rule is the simplest backup strategy worth having: keep 3 copies of your important data, on 2 different types of storage, with 1 copy off-site. For example: the working files on your computer, a copy on an external drive in the office, and a copy in cloud storage. Any single disaster, theft, fire, hardware failure, ransomware, can then destroy at most two copies, and the third brings the business back.

What should a small business back up?

• Customer records. Your CRM data, contact lists and transaction history. This is the business, and losing it can also be a Data Privacy Act problem.
• Financial records. Invoices, receipts, payroll and everything the BIR might ask about, for the years it might ask.
• Your website and its database. Ask where your site's backups live and when a restore was last tested; proper maintenance includes both.
• Operational files. Contracts, permits, price lists, product photos, designs. Anything that would take days to recreate.
• Access itself. A sealed record of account logins and domain registrar details, so losing one phone or one employee does not lock you out of your own business.

How do you set this up without an IT department?

1. Automate the cloud copy. Google Drive, OneDrive or Dropbox syncing your business folders continuously. If a human has to remember it, it will be forgotten.
2. Add a weekly external drive copy. One drive, one recurring calendar reminder, kept somewhere other than on top of the computer it backs up.
3. Put dates in your folder names. Versioned copies protect you from the quiet disaster: a corrupted or wrongly edited file faithfully backed up over the only good copy.
4. Test a restore every quarter. Open a backup and actually recover one file. An untested backup is a hope, not a plan.
5. Write down who does what. One page: what is backed up, where, how often, and who checks. Tape it inside a cabinet door.

Ransomware note: sync alone is not backup. If ransomware encrypts your files, sync happily uploads the encrypted versions. You need version history (most cloud drives keep it) or a disconnected copy, which is exactly why 3-2-1 includes different storage types.

Sleep through the next disaster

We set up automated 3-2-1 backups for businesses, and for the websites and custom systems we build, tested restores are part of the maintenance plan. Talk to us and get it done this week, before it is needed.