3-2-1 Backup Rule: Why Every Derbyshire Business Should Follow It

Imagine arriving at work tomorrow to find every file on your server encrypted. A ransomware note demands £50,000 for the decryption key. Your accountant needs last month's payroll. A major client wants their project files. And your backup? It hasn't run properly for three months.

This scenario isn't hypothetical — it happens to Derbyshire businesses every year. The difference between a company that survives and one that doesn't often comes down to one thing: whether they followed the 3-2-1 backup rule.

What Is the 3-2-1 Backup Rule?

The 3-2-1 rule is the gold standard of data protection, endorsed by cybersecurity agencies worldwide. It's beautifully simple:

• 3 copies of your data (the original plus two backups)
• 2 different media types (e.g., local drive and cloud storage)
• 1 copy offsite (physically separate from your premises)

Let's break down why each element matters.

Why Three Copies?

Relying on a single backup is gambling. Backups fail. Hard drives die. Cloud sync services can propagate ransomware if not configured correctly. With three copies — your live data plus two independent backups — you have redundancy for your redundancy. Even if one backup is corrupted, you still have another.

"We thought our cloud sync was our backup. When ransomware hit, the malicious files synced to the cloud within minutes. We lost everything because we didn't have a separate, immutable backup." — Professional Services Client, Chesterfield

Why Two Different Media?

Different storage technologies fail for different reasons. A local NAS drive might be destroyed in a fire. A cloud provider might have a service outage. By using two distinct media types — such as a local network-attached storage device and a cloud backup service — you eliminate single points of failure.

Common combinations include:

• On-premises NAS + cloud backup (e.g., Azure, AWS, or specialist business backup)
• External hard drive + offsite tape rotation
• Local server + immutable cloud storage with versioning

Why One Copy Offsite?

Local disasters — fire, flood, theft, power surges — can destroy everything in your building simultaneously. An offsite backup ensures that even if your premises are completely wiped out, your data survives. The "offsite" copy is typically in the cloud, but it could also be drives stored in a second location.

The Modern 3-2-1-1 Rule

Some experts now recommend an updated version: the 3-2-1-1 rule. This adds an extra layer of protection:

• 1 immutable backup that cannot be altered or deleted by anyone — including attackers with admin credentials

Immutable backups are stored in write-once-read-many (WORM) format. Even if ransomware gains full access to your network, it cannot touch this backup. This is the single most effective defence against modern ransomware strains.

How Liberty ICT Implements 3-2-1

For our Derbyshire clients, we design backup strategies that go beyond the basics:

• Automated hourly backups to local devices for rapid recovery
• Encrypted daily uploads to immutable cloud storage
• Versioning that keeps 90 days of file history
• Quarterly restoration tests to verify backups actually work
• Monitoring and alerting so we know immediately if a backup fails

Test Your Backups Before You Need Them

A backup you can't restore is worthless. We recommend testing your restoration process quarterly at minimum. This means actually pulling files back from backup, opening them, and verifying they're intact. It's the only way to be certain your safety net works.