In summary<\/p>\n
- \n
- Backup and disaster recovery are not the same thing<\/strong> \u2014 having backups does not guarantee that the company will resume operations.<\/li>\n
- A 3-2-1 rule<\/strong>three copies of the data, on two different types of media, with one stored off-site.<\/li>\n
- RPO and RTO<\/strong> they are the two numbers that define the strategy: how much data you can afford to lose and how much downtime you can afford.<\/li>\n
- A backup that has never been restored is not a backup \u2014 it's an assumption.<\/li>\n<\/ul>\n<\/div>\n
\nIn this article<\/p>\n
- \n
- Backup is not the same as disaster recovery<\/a><\/li>\n
- The 3-2-1 rule<\/a><\/li>\n
- Two metrics that every company should know<\/a><\/li>\n
- Why testing restoration is just as important as making the backup<\/a><\/li>\n
- Scenarios that a disaster recovery plan should cover<\/a><\/li>\n
- Where to start<\/a><\/li>\n<\/ol>\n<\/div>\n
Many SMEs only realise that their backup isn\u2019t working at the worst possible moment: when they actually need it. The difference between an outage lasting a few hours and permanent data loss almost always lies in the way the backup and disaster recovery strategy was planned \u2014 not just implemented.<\/p>\n
Backup is not the same as disaster recovery<\/h2>\n
A backup is a copy of data. A disaster recovery (DR) plan is the set of processes that ensures that, in the event of a failure \u2014 hardware breakdown, cyberattack, fire, human error \u2014 the company is able to resume operations within an acceptable timeframe. It is entirely possible to have backups and still not have an effective recovery plan: the copy exists, but no one has tested how long it takes to restore it, or whether the process even works.<\/p>\n
\nTest the restore, not just the backup.<\/strong> A backup that runs every night without error might be copying corrupted files. Only periodic restoration in a controlled environment confirms that it works.<\/p>\n<\/div>\n
The 3-2-1 rule<\/h2>\n
A robust backup strategy typically follows the 3-2-1 rule: three copies of the data, on at least two different types of media, with at least one copy offsite. This last component is frequently the most neglected \u2014 and the most critical in scenarios such as fire, flood or theft, where backups kept in the same building are lost along with the original systems.<\/p>\n
![\"3-2-1](\"https:\/\/www.dataroad-it.com\/wp-content\/uploads\/2026\/08\/dataroad-regra-3-2-1-backup.png\")
The 3-2-1 rule applied to an SME \u00b7 DataRoad<\/figcaption><\/figure>\n Two metrics that every company should know<\/h2>\n
- \n
- RPO (Recovery Point Objective):<\/strong> What is the maximum amount of data that the company can afford to lose, measured in time? If the last valid backup is 24 hours old, in the event of a failure the company loses up to a day of work.<\/li>\n
- Recovery Time Objective (RTO):<\/strong> how long can the company be without access to its systems before the impact becomes unacceptable to the business?<\/li>\n<\/ul>\n
Defining these two values \u2014 even if only approximately \u2014 is the first step towards correctly sizing a backup strategy, because a daily backup run at 2 am might be completely adequate for one business, and entirely insufficient for another.<\/p>\n
Why testing restoration is just as important as making the backup<\/h2>\n
A backup that runs every night without generating an error is no guarantee of anything \u2014 it could be copying corrupted files, inconsistent databases, or simply not including everything needed to restore operations. Periodically testing the restoration process in a controlled environment is the only way to confirm that, when it is truly needed, the backup will work.<\/p>\n
Scenarios that a disaster recovery plan should cover<\/h2>\n
- \n
- Hardware failure (disk, server, network equipment);<\/li>\n
- Cyber attack, including ransomware \u2014 a scenario in which having offline or immutable backups is decisive, because it prevents the attack itself from encrypting or deleting the backup copies;<\/li>\n
- Human error \u2014 accidental deletion of files or folders;<\/li>\n
- Physical incidents on-site \u2014 fire, flood, equipment theft.<\/li>\n<\/ul>\n
Where to start<\/h2>\n
If your company cannot confidently answer these three questions \u2014 where the backups are, how long it has been since they were tested, and how long it would take to restore the systems in the event of a failure \u2014 it is a good sign that it is worth reviewing your current strategy before you need it.<\/p>\n
<\/p>\n
Discover DataRoad's managed backup services<\/span>Automatic, tested and monitored backups with guaranteed recovery<\/span>Find out more<\/span><\/a><\/div>\n<\/p>\n
DataRoad \u2014 ongoing IT support for businesses<\/h2>\n
A DataRoad<\/strong> is a Portuguese company specialising in managed IT services (MSP)<\/strong>, headquartered in Alfragide (Lisbon) and with an active presence in Porto, Faro, Funchal, \u00c9vora, Set\u00fabal and Beja. Since 2015, it has ensured the smooth running of IT infrastructures for businesses that cannot afford downtime \u2014 hotels, clinics, embassies, universities, multinationals and demanding SMEs \u2014 with a certified technical team, continuous monitoring and 24\/7 support.<\/p>\n
DataRoad ensures the ongoing IT support<\/strong> of companies via the service IT Unlimited<\/strong>: unlimited support at a fixed cost, both remote and on-site, with 24\/7 monitoring, alerts and proactive interventions. The aim is simple \u2014 to prevent problems from even bringing operations to a standstill.<\/p>\n
DataRoad Services<\/h2>\n
- \n
- IT Unlimited \u2014 round-the-clock IT support<\/strong>: unlimited support at a fixed cost, both remote and on-site, with incident management and rapid response.<\/li>\n
- Computer networks and structured cabling<\/strong>: network design, installation and certification; Layer 3 switching and PoE.<\/li>\n
- Enterprise wireless networks (Wi-Fi 6 and Wi-Fi 7)<\/strong>: coverage study, cloud management and isolated visitor networks.<\/li>\n
- Cybersecurity and corporate firewalls<\/strong>: perimeter protection, traffic control and threat mitigation.<\/li>\n
- Servers, backups and disaster recovery<\/strong>: servers, NAS devices and centralised backups.<\/li>\n
- CCTV video surveillance<\/strong>: video surveillance systems with continuous recording.<\/li>\n
- Monitoring, alarm systems and reporting<\/strong>: real-time monitoring, automatic alerts and proactive interventions.<\/li>\n
- IT consultancy and project management<\/strong>: relocation of premises, new facilities and modernisation of infrastructure.<\/li>\n
- Cross-platform support<\/strong>: Windows and Apple environments, with comprehensive management of the IT infrastructure.<\/li>\n<\/ul>\n
\nGet in touch with DataRoad<\/p>\n
Not sure if your backups will work when needed? We check what is there and provide a no-obligation quote.<\/p>\n
- Computer networks and structured cabling<\/strong>: network design, installation and certification; Layer 3 switching and PoE.<\/li>\n
- IT Unlimited \u2014 round-the-clock IT support<\/strong>: unlimited support at a fixed cost, both remote and on-site, with incident management and rapid response.<\/li>\n
- Recovery Time Objective (RTO):<\/strong> how long can the company be without access to its systems before the impact becomes unacceptable to the business?<\/li>\n<\/ul>\n
- The 3-2-1 rule<\/a><\/li>\n
- A 3-2-1 rule<\/strong>three copies of the data, on two different types of media, with one stored off-site.<\/li>\n