What the numbers mean
The rule describes three copies of data, on two different media types, with one copy off-site. It is a starting point for reducing shared failure risks, not a guarantee of recovery. Define which data matters and how much downtime or data loss the business can accept.
Protect the copies
Separate backup access from routine user access where possible. Consider offline or immutable protection according to the chosen system and risks. A second folder on the same disk is not meaningful separation from disk failure. Retention needs should account for mistakes discovered late.
Prove recovery
Restore representative files and application data in a controlled environment. Record the result, time taken and missing dependencies. Review backup failures and capacity regularly; a green job status alone does not prove the business can resume operations.
Sources and further reading
Options vary by product version, subscription and organisation policy. Refer to the vendor documentation before making changes.
Need help putting this into practice?
Describe your current setup and the issue. We will clarify the appropriate next step and scope of support.
Related service ↗