Backup and Disaster Recovery
Don't lose data even during a ransomware attack. On-premise and cloud backup, immutable copies, tested recovery procedures. You know your RTO/RPO and know backup will work when needed - because you test it regularly.
Describe your scope — your account manager will reply within 24 hours.
- Free quote
What is backup and disaster recovery?
Backup and disaster recovery is a data protection strategy combining the 3-2-1 rule (3 copies, 2 media, 1 off-site), immutable backups resistant to ransomware, and regularly tested recovery procedures with defined RTO and RPO targets. nFlo implements and manages Veeam, Commvault, and IBM Storage Protect solutions, including DR drills that verify backup actually works before a real incident occurs.
Contact your account manager
Discuss Backup and Disaster Recovery with your dedicated account manager.
60% of companies will never recover data from backup - because they never tested it
Backup and DR system with regular recovery testing
3-2-1 Strategy
3 copies, 2 media, 1 off-site - protection against every scenario
Immutable Backup
Copies that ransomware cannot encrypt
DR Testing
Regular tests to verify backup actually works
Ransomware Encrypted Production and Backup - 14 Days Downtime
Backup and disaster recovery are the part of IT infrastructure that decides how long a company is down — not whether an incident happens, but how many hours or days pass before the systems are running again. That number is set long before the incident, by design decisions nobody sees until they are tested.
A manufacturing company fell victim to ransomware. Production systems encrypted - and backup on the same NAS. Recovery from tapes that no one had tested for 2 years took 14 days. Losses: €1.9 million in revenue + €120K ransom they paid anyway.
Without proper backup and DR:
- Data loss during storage failure, ransomware, human error
- Long downtime because you don’t know how long recovery will take
- Backup on same storage as production - ransomware encrypts everything
- No certainty backup actually works - because you’ve never tested it
- Non-compliance with regulations (NIS2, GDPR) regarding data protection
Recovery You Can Prove — Not Assume
A backup is the last line of defense against ransomware — provided it is attack-resilient. We apply the 3-2-1 rule (extended to 3-2-1-1-0) with immutable and air-gapped copies protected by separate credentials.
The key is the ability to recover quickly and verifiably within a defined RTO/RPO. We test recovery regularly, so an attack is not a choice between downtime and paying the ransom.
From 3-2-1 Strategy to Regular DR Tests
We don’t just install a backup agent. We design a data protection strategy aligned with your RTO/RPO, implement the solution, test recovery, and train your team on incident response.
What you get:
- Business Impact Analysis - RTO and RPO determination for each system
- Backup strategy following 3-2-1 rule (3 copies, 2 media, 1 off-site)
- Backup platform implementation (Veeam, Commvault, IBM Storage Protect — formerly IBM Spectrum Protect)
- Immutable backup configuration (ransomware protection)
- Cloud backup (AWS, Azure) for off-site copy
- Integration with Hyper-V, Proxmox, physical servers
- Application and database backup (SQL, Oracle, Exchange, SAP)
- Disaster recovery plan with specific procedures
- Recovery tests - verification that backup works
- Backup job monitoring and automatic alerts
- Documentation and team training
Who Is It For?
This service is for you if:
- You’re not sure your backup will actually work
- Backup is on the same storage as production data
- You don’t know your RTO and RPO - don’t know how long recovery will take
- You must meet NIS2, GDPR, ISO 27001 backup requirements
- You want ransomware protection through immutable copies
- You need backup for virtualization, cloud (AWS, Azure, M365)
3-2-1-1-0 Backup Strategy
Extension of Classic 3-2-1 Rule
We recommend the 3-2-1-1-0 strategy as protection against modern threats:
- 3 data copies (production + 2 backups)
- 2 different media types (disk + cloud or tape)
- 1 off-site copy (in different location)
- 1 immutable copy (air-gap or object lock)
- 0 verification errors (test your recovery!)
Backup Platforms
Veeam Backup & Replication
Most popular platform for virtual environments:
- VM backup and replication
- Instant VM Recovery (RTO in minutes)
- Backup to cloud (AWS, Azure, Wasabi)
- Immutable backup (S3 Object Lock, hardened repository)
- Backup for Microsoft 365 (Exchange, SharePoint, OneDrive, Teams)
- Veeam Data Cloud for Entra ID - Microsoft identity backup
- Veeam ONE for monitoring
Commvault Complete Backup & Recovery
Enterprise data protection:
- VM, physical, cloud, SaaS backup
- Metallic SaaS - backup as a service
- HyperScale X - scale-out backup appliance
- Ransomware detection and recovery
- Long-term retention and compliance
IBM Storage Protect
Backup and archiving for large environments:
- Source-side deduplication
- Backup to tape libraries
- Safeguarded Copy - immutable backup
- Integration with IBM storage
Related Glossary Terms
Learn more about key concepts related to this service:
How we work
Our proven service delivery process.
BIA
Business Impact Analysis - RTO/RPO determination
Design
Backup and disaster recovery strategy
Implement
Veeam/Commvault deployment, configuration
Test
Recovery test - RTO/RPO verification
Monitor
Continuous monitoring, alerts, regular tests
Benefits for your business
What you gain by choosing this service.
Data Loss Protection
Data safe even during ransomware or hardware failure
Fast Recovery
Return to operations in hours instead of days
Regulatory Compliance
Meet NIS2, GDPR, ISO 27001 requirements
Lower Premiums
Insurers value tested backup
Related Articles
Expand your knowledge with our resources.
Business impact analysis (BIA) — what it is and how to carry it out step by step
During an outage, the board asks three things: what has stopped, how much each hour costs, and what we restore first. A business impact analysis answers them before anything breaks. Here is how to run one and turn its results into recovery objectives.
Read more →How to encrypt USB drives and disks in a business — removable media encryption, group policy and GDPR
A lost USB stick with a customer list is not a hardware problem for a business — it is a data problem. Encrypting one drive with a password takes a few clicks, but a company needs more: an unencrypted drive should never receive data at all, and recovery keys should sit in one controlled place.
Read more →Immutable backup for businesses: why immutability is a property of the whole arrangement, not of the medium
"We have immutable copies" sounds like the end of a ransomware conversation. It is usually the beginning, because an immutable medium without separated accounts and a separated recovery console protects against an administrator's mistake, not against an attacker who already is that administrator. We show where the line runs and how to verify it.
Read more →Frequently Asked Questions
Common questions about Backup and Disaster Recovery.
What is the 3-2-1 backup strategy?
The 3-2-1 strategy is the golden rule of backup: 3 copies of data, on 2 different media (e.g. disk + tape), with 1 copy off-site (in a different location or cloud). It protects against single device failure, site failure and ransomware attacks.
What is immutable backup and why is it important?
Immutable backup is a backup copy that cannot be modified or deleted for a specified period of time. It is crucial for ransomware protection - even if attackers take control of systems, they cannot encrypt or delete immutable copies.
What is the difference between RTO and RPO?
RPO (Recovery Point Objective) is the maximum acceptable data loss - e.g. RPO 1h means you can lose max 1h of data. RTO (Recovery Time Objective) is the time needed to restore systems - e.g. RTO 4h means you must be back up and running within 4h.
How often should backup and disaster recovery be tested?
We recommend: backup tests (single file recovery) monthly, DR tests (full system recovery) quarterly, full DR exercises (failure simulation) once or twice a year. ISO 27001 and NIS2 require regular testing.
How much does backup and disaster recovery implementation cost?
Cost depends on data volume, required RTO/RPO and chosen technology. A backup project for a mid-size company (10-50 TB) typically costs €7,000-24,000. This includes licenses, implementation and training. We also offer a subscription model (BaaS).