If ransomware hit your business right now, could you recover? For most South African SMEs, the honest answer is no — or at best, “partially, after several days of downtime.” The 3-2-1 backup rule is a simple, proven framework that changes that answer to a confident yes.
What Is the 3-2-1 Rule?
The concept is straightforward: maintain 3 copies of your data, stored on 2 different types of media, with 1 copy offsite. This approach ensures that no single failure — hardware malfunction, ransomware encryption, fire, theft, or even a disgruntled employee — can destroy all your data.
The Three Copies
Your primary data (the files you work with daily) counts as copy one. Your first backup is copy two — typically an on-premises backup to a NAS device or dedicated backup server. Copy three is your offsite or cloud backup, stored in a geographically separate location.
Two Different Media Types
If both your production data and backup sit on the same storage array, a single hardware failure wipes out both. Use different storage technologies: local SSD or HDD for production, NAS or tape for local backup, and cloud object storage for offsite. This diversity dramatically reduces the probability of simultaneous failure.
One Copy Offsite
This is the component most businesses skip — and the one that matters most in a disaster. Load shedding surges, office fires, floods, and sophisticated ransomware that targets backup shares all make on-premises-only backups insufficient. Your offsite copy should be air-gapped or immutable, meaning ransomware cannot encrypt or delete it even if it compromises your entire network.
Modern Additions: 3-2-1-1-0
Security experts now recommend extending the rule: add 1 immutable or air-gapped copy, and verify 0 errors through regular automated recovery testing. An untested backup is not a backup — it’s a hope.
How Toggle Now Implements This
We deploy Acronis Cyber Protect across your environment, which delivers local backup to on-premises storage, encrypted cloud replication to Acronis’s global data centres, immutable backup copies that ransomware cannot tamper with, and automated daily verification with recovery testing. Our managed backup service starts from R299/month per server, making enterprise-grade data protection accessible to every South African business.
Don’t wait for a disaster to find out your backups don’t work. Explore our backup solutions or request a backup audit today.