Data Protection - 3-2-1 Backup Rules must evolve

 

Let’s back up a moment . The 3-2-1 backup strategy simply states that you should have 3 copies of your data (your production data and 2 backup copies) on two different media (disk and tape) with one copy off-site for disaster recovery.  This is depicted in the figure that follows.

The 3-2-1 backup strategy depicted above was an advancement on the tape-based strategy where you had only one media copy and you took it offsite.  So it was an advancement in its time.  It was inherently limited, however, due to the technology of the time.  With older continuity and backup protection, 3-2-1 was about the best you could do.  The second media type was typically tape and depending upon the size of the company using the 3-2-1 backup strategy the options for getting it offsite ranged from hiring a service such as Iron Mountain to putting it in the back of your car.  As cloud-based backup companies evolved, they offered 3-2-1 backup via the cloud (and for the most part ignored the second media type in favor of the cloud.)

This backup strategy enables you to perform disaster recovery in two different ways – with the cloud and then with physically moving data offsite.  In this approach, the cloud does not receive all backup copies – they are split between the first and second media type locally.   Typical IT administrators who use this backup strategy are trading increased labor (physically moving data offsite) for lowered spend on WAN bandwidth.

3-2-2 backup strategy

In this backup strategy, you achieve continuity through the use of both the cloud and a local second media type.  The cloud affords you both continuity and extended retention.  The local second media affords you another copy of what you have in the cloud in a 3-2-2 backup strategy.  

3-2-3 backup strategy

A variation of the 3-2-2 backup strategy

So what will happen in 2022 ?

In 2022, the 3-2-1 backup rule will continue to be the golden rule of complete data protection. This means that organizations will keep three copies of data saved across at least two media types, with one more copy saved offsite. In 2022, ROI will also remain the name of the game, so organizations will seek a proven solution that makes this easy and affordable to implement. The ideal backup solution will enable a backup script to a local destination and a backup transfer script to an offsite target. Using a transfer script to copy backups to a second location enables the administrator to perform the operation offline, without the original source needing to be used. 

In 2022, there will be various options available for implementing 3-2-1 workflows. The first possibility will be disk and cloud. Combining local disks and cloud storage locations is a common pattern for a backup strategy. An available backup on a local disk translates into very fast recovery time, as the local network allows for much higher bandwidth. A remote backup on a cloud storage location insulates the organization’s data from disaster, malware, and other problems that arise. The second option will be network-attached storage (NAS) and cloud. NAS devices are an affordable on-site storage location for backups. Leveraging an on-site NAS ensures a large, dedicated storage pool and high bandwidth for backups. Transferring those backups to the cloud as an offline process allows administrators to avoid touching the original source multiple times. The third option will be disk and tape. Disk remains the most common storage media, and tape continues to make strides in speed and storage capacity. With a local disk, the administrator can quickly back up their environment and have the backups available for fast restore. Using a tape library for offsite storage enables the administrator to store their backups in a safe location (like a security deposit box or a third-party storage locker) that – unlike the cloud – the administrator has physical access to. 

Of course, in 2022, going beyond the 3-2-1 backup rule will provide organizations with extra insurance to protect their digital transformation initiatives. Organizations can choose to utilize a second cloud storage location (i.e., 3-2-2 strategy) or NAS, tape and/or cloud (i.e., 3-3-2 strategy) for added redundancy. 

Finally, in 2022, utilizing WORM storage in the cloud with Immutable Backups will provide the best protection against ransomware attacks. With a locked backup, malware cannot delete your critical data, enabling the administrator to recover if the worst does happen. By combining the 3-2-1 backup with immutable backups in the cloud, administrators can ensure their organization’s data is protected against the latest threat landscape.

https://www.cisa.gov/uscert/sites/default/files/publications/data_backup_options.pdf