The rule of thumb stays 3-2-1
The cloud hasn’t really changed what companies do (or should do), it just offers a much more efficient way of doing it. Many of the old principles still apply, including the 3-2-1 approach to data backups. Assuming you’re working in the cloud already, you’ll have your production copy and your first backup in your main cloud. Taking a cloud-to-cloud backup will give you a third copy on what is effectively both a second medium and off-site.
You can back up from and to both private clouds and public clouds.
If you’re working in a private cloud, you’ll need to organize all your backups yourself or have an IT services vendor such as a cloud data backup vendor take care of it for you. You could run a second private cloud either just for cloud data backups or as a full disaster-recovery solution (data plus anything a user needs to be able to utilize it). This would give you maximum control and privacy (especially if you kept the stored data encrypted), but would usually be the most expensive option.
Alternatively, you may be able to backup to a public cloud even if your data is sensitive. The reason for this is that your data can be encrypted on your own servers and then kept encrypted during the transport and storage processes (and also during the return journey if you need to restore from it). Ideally, you would keep control of your own keys for maximum security.
If you’re working in a public cloud then you could use a private cloud just for storage, to minimize the expense. That said, if you’re working in the public cloud then presumably your data is suitable for that environment and you’ve chosen it for a reason, which was probably linked to cost-effectiveness. In other words, you’ve probably already decided that a private cloud isn’t for you, at least for now.
That being so, the most sensible approach would probably be to back up to another public cloud. This would safeguard your data against any issues with your main public cloud provider, or erroneous deletion (accidental or malicious). You would need to be aware that backing up to a public cloud is less straightforward than you might think given that public clouds are often (and accurately) marketed as simple solutions for SMBs. There are some technical challenges, but a good cloud data backup provider will be able to handle them.
You need to keep the law/compliance in mind at all times
Possibly this should have been mentioned as the first point, but if you are practicing the highest standards of data security (as you should be), then there’s a good chance that you’re going to be in full compliance in any case. That said, you can’t just take it for granted that you are following either the law or the requirements of any compliance program, especially since their requirements change both according to place and with time. You need to commit to keeping yourself regularly updated as to what is required of you.
The key phrase in that sentence is “required of you”. As far as the law, regulators and data subjects are concerned, if data is handed to you, then the responsibility for ensuring its security lies with you, not your vendors. What this means in practical terms is that you are expected to take appropriate steps to ensure that you agree contracts that reflect your legal/regulatory obligations, that you supervise your vendors appropriately and that you take action to address issues where necessary.
Drawing up contracts is relatively easy. The challenge is usually to keep an eye on what your vendor is doing and to take steps to enforce contractual obligations if you are dissatisfied with their performance. Supervising local vendors is much easier than supervising vendors which are based a long way from you. Likewise, local vendors will work under the same legal system which means that any disputes between you will be settled by your local courts.
With that in mind, it is generally safest to look for cloud data backup partners which are located in Placerville, rather than cloud data backup partners which offer services in Placerville but are located elsewhere.
If you’d like to speak to a reputable and experienced cloud data backup vendor in Placerville, please click here now to contact Aperio.IT.
Cloud Data Backup West Sacramento