What’s your approach? I’m asking... because for SMB clients, I’ve heard literally every possible combination of tactics, all with the same strategic aim - protecting the business.
Here’s what I do - not saying it’s perfect... certainly not saying it’s the only way... but it’s working for us internally, and is basically what we do/recommend for clients (depending on their risk profile, budget, and expectations).
- Nightly full backups of everything that’s "business critical", with a two-week rotation.
- At the beginning of each week, the last completed backup is taken off-site, and the previous one is returned.
- At the end of every month, the most recent completed tape is taken out of rotation and stored off-site.
- At the end of the year, a tape is taken off-site and stored permanently.
What do you think? Obviously the more tapes we include the more options we have... but in general terms do you have any suggestions for improvement?