Audit the Backup Plan — TechKnowSurge

About this interactive

A backup is a point-in-time copy, kept so that systems can be restored when something goes wrong. The worry when you need one is always the same: is it good, and is it the right one? Settling the decisions ahead of time removes most of that. What to back up depends on whether the data can be recreated. Customer data in a database cannot be reassembled once it is gone; servers in a DevOps shop can be rebuilt from scripts. Criticality, cost, the RPO and RTO, copy times, security and how fast the data changes all decide how often. Where copies live: onsite copies restore fast, which helps the RTO, but a fire takes them with the originals, so keep an offsite copy too. Encrypt the copies wherever they are kept. Tapes rotate between onsite and offsite sets. How long: a retention period says how long each backup is kept, and you stick to it. Old data you will probably never use is archived to secure, cheaper storage instead of slowing the live system. When a customer must be erased, the copies in backup and archive have to go too, or the data stays a liability. Restoring: overwrite the original, restore side by side under a new name, or restore to an alternate path, and tell the user which. Run a media inventory on a tape to see what is on it. A snapshot freezes a file while changes go to a separate delta, which lets a backup copy an open file cleanly; on a virtual machine, a snapshot kept for long slows it down. And test restores, or you find out what is missing when you need it.

What you'll learn

Find the decisions in a backup plan that would fail when the backup is needed: unprotected data that cannot be recreated, no offsite copy, no encryption, no tested restore
Apply the lesson's lifecycle decisions to a plan: retention, archiving, disposal of every copy, how a restore is done and told to the user, and how long a snapshot is kept

Aligned to

NIST CSF

PR.DS-11 Backups of data are created, protected, maintained, and tested.

NIST 800-53

CP-9 System Backup

CompTIA Security+

3.4 Explain the importance of resilience and recovery in security architecture.

3.3 Compare and contrast concepts and strategies to protect data.

CompTIA A+ Core 2

4.3 Given a scenario, implement workstation backup and recovery methods.

CompTIA Server+

3.7 Given a scenario, implement backup and restore procedures.

ISC2 CISSP

7.10 Implement recovery strategies

Cisco CCST Cybersecurity

4.4 Explain the importance of disaster recovery and business continuity planning

Key terms

Backup: A copy of data captured at a specific point in time and stored separately from the source system, used to restore information in the event of data loss, corruption, or a security incident such as ransomware.
Off-Site Backup: A backup copy stored at a separate physical location from the primary data, providing resilience against site-wide disasters such as fire or flood.
Retention Period: The defined length of time that backup data is kept before it is deleted or disposed of.
Archiving: The process of moving data that is no longer actively used to long-term storage for retention purposes, preserving a record that can be retrieved if needed in the future.
Data Disposal: The process of permanently removing data from systems or media in a controlled manner as part of an organization's data retention plan.
Snapshot: A point-in-time copy of a storage volume or virtual machine state that captures the original data and tracks subsequent changes as a delta, enabling rapid backup and recovery without interrupting running workloads.
Media Inventory: A process in which a tape backup device reads and catalogs all data stored on the tape, enabling the user to locate and restore individual files without a full restore.
Side-by-Side Restore: A restore option that places the recovered file in the same directory as the existing file, preserving both copies simultaneously.
Alternate Location Restore: A restore option that writes recovered files to a different folder or path rather than the original source location.
Onsite Storage: Backup media kept at the same physical location as the primary systems, enabling fast restore but exposing data to the same local risks.
Encryption: The process of converting readable data into an unreadable format using an algorithm and key to prevent unauthorized access.

Topics

Backup Off Site Backup Retention Period Snapshot Interactive Spot The Error

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →