What are the best backup and recovery strategies for large enterprises?

1 Backup types

One of the first decisions to make is what type of backup to use for different data sources and scenarios. There are three main types of backup: full, incremental, and differential. A full backup copies all the data in a source, while an incremental backup copies only the data that has changed since the last backup, and a differential backup copies the data that has changed since the last full backup. Each type has its pros and cons in terms of storage space, backup time, recovery time, and performance impact. Generally, a combination of full and incremental backups is recommended for large enterprises, as it provides a balance between efficiency and flexibility.

2 Backup frequency

Another important factor to consider is how often to perform backups, which depends on the business requirements, the data value, and the recovery point objective (RPO). The RPO is the maximum amount of data that can be lost in a disaster without unacceptable consequences. For example, if the RPO is one hour, then backups should be done at least every hour. The backup frequency also affects the backup window, which is the time allocated for performing backups without disrupting normal operations. Ideally, the backup window should be as short as possible, and backups should be done during off-peak hours or in the background.

3 Backup location

The next decision is where to store the backups, which involves choosing between on-premise, cloud, or hybrid options. On-premise backups are stored on local servers, disks, or tapes, which offer fast access, control, and security, but also require more maintenance, space, and cost. Cloud backups are stored on remote servers, which offer scalability, flexibility, and reliability, but also introduce latency, bandwidth, and security risks. Hybrid backups are a combination of both, which can leverage the advantages of each option and mitigate the disadvantages. For example, a hybrid backup strategy could use on-premise backups for critical and frequently accessed data, and cloud backups for less critical and less accessed data.

4 Backup encryption

One of the key aspects of backup security is encryption, which protects the data from unauthorized access, modification, or deletion. Encryption can be applied at different levels: source, transit, or destination. Source encryption encrypts the data before it leaves the original device, which ensures that only authorized users can access it. Transit encryption encrypts the data while it is being transferred to the backup location, which prevents interception or tampering. Destination encryption encrypts the data after it arrives at the backup location, which safeguards it from unauthorized access or theft. Ideally, a backup strategy should use all three levels of encryption, or at least transit and destination encryption.

5 Recovery methods

The final and most crucial part of a backup strategy is the recovery method, which determines how to restore the data and systems in case of a disaster. There are two main types of recovery: file-level and image-level. File-level recovery restores individual files or folders from the backup, which is useful for minor data loss or corruption. Image-level recovery restores the entire system or device from the backup, which is useful for major data loss or system failure. The recovery method also depends on the recovery time objective (RTO), which is the maximum amount of time that can elapse before the data and systems are restored without unacceptable consequences. For example, if the RTO is 15 minutes, then the recovery method should be as fast and automated as possible.

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?