It is no secret – you need to backup your business data. It is simply in your best interest to do so… yet many small businesses do not. I have been contemplating this recently trying to understand “why” – I can only think of one reason that would explain why small businesses do not take data backup seriously: they have never experiences significant data loss.
Consider what a significant data loss would be for your small business, run the “what ifs” through your mind.
Here are a couple to get you started:
Q: What if the server dies? (doesn’t matter how… it’s dead) How do you access your files, your accounting system, your emails, your databases? How do you conduct business?
Q: What if you are a law firm or accounting firm and all of your client files are in a file cabinet… and you have a flood or fire or a theft?
Also realize that it isn’t just you (or your employees) who suffer from a data loss – your customers are also impacted.
Tapes
Also, let’s be frank – tape backups do not work well for most small businesses. What I mean is that in most small businesses, if they are backing up their important data regularly, are:
- not testing the backups regularly to make sure they actually work
- probably not rotating tapes regularly… or, worse, they are rotating tapes regularly but are not monitoring the backups to make sure they were successful
- having issues getting all of their data backed up during the “off hours” window of time
Tape backups, also assume that the hardware (the tapes, the tape drive) is in working order and very (near 100%) reliable.
Compliance
In my mind it is simply common sense: if you have sensitive data, if must be protected. Not only because it is the law (e.g. SOX, HIPAA, GLBA, etc) but your business depends on the data!
The common theme in the legislation (as I see it) is that you need to identify the sensitive data and take reasonable steps to safeguard it… I like the way wikipedia says it “This rule is intended to do what most businesses should already be doing: protecting their clients.”
What to backup and how long to keep backups
I strongly recommend backing up all of your email, financial data, customer records, and any other data that, if lost, could hurt your business.
(Kind of vague… it depends on your business)
As a consultant, the worst calls to get are “I’m missing my QuickBooks file…” and when I check the backup and find it missing or a really old copy – that doesn’t make for a easy conversation.
I recommend keeping your backups for the same amount of time that the IRS required you to keep records. Basically 3 to 7 years depending on your circumstance. You should realize you will NOT get this type of retention from Mozy or Carbonite who only backup 30 days worth of data (including deleted files which are removed from the backup after 30 days).
In keeping with the 3 to 7 year retention I recommend using the Grandfather-Father-Son (GFS) scheme – I’d stay away from the Towers of Hanoi scheme as it’s rather complex.
In the simplest form, GFS is a daily full backup, you keep each week end (Friday) backup until the end of the month, you keep each month end backup until the end of the year, and you keep each year end (usually the last month end) backup for 3 to 7 years.
How online backups help
Simply backing up to a local hard drive or tape is not enough for the simple reason that the backup does not leave the building/office. It’s great that you may be backing up your data… but keeping that backup in the office does not reduce the risk to your data.
The “best practice” is to get your backups offsite. Online data backup providers are a good way to do this. p3 Technologies uses Intronis, which we resell, because of the flexibility in backup retention. You can literally keep a backup for years and years if you choose to. Whereas, Mozy and other don’t support more than 30 days.
Having said that though, I strongly recommend you backup to BOTH an external hard drive in your office and online.
Why? Simply because when it comes time to restore files from an online provider, the speed of the restore is directly tied to your internet speed. I wouldn’t worry about it if you only restore a handful of files… but restored multiple folders (or whole drives) can take a long time. So, to compensate, keep a daily full backup locally and keep your backups online to fully protect your data.