# Data backup and disaster recovery: the 3-2-1 rule, tested restores

Three copies, two media, one off site. We test the restore. RTO and RPO are agreed with you.

Host backup: the 3-2-1 rule, an immutable anti-ransomware copy, restore tests, RTO/RPO.

### How often should we back up?

It depends on criticality: daily for most SMEs, more often for fast-changing data.

### Is the cloud enough?

Rarely on its own. The 3-2-1 rule combines local and remote copies for real resilience.

### Do you test restores?

Yes — an untested backup is not a backup. Tests are scheduled.

### How long does a restore take?

From a few minutes to a few hours depending on volume — the RTO is agreed with you.

### Where are our backups stored?

On site, in the cloud or at a second site — outside the production perimeter, following 3-2-1.