Define recovery objectives
Recovery Point Objective describes acceptable data loss. Recovery Time Objective describes acceptable restoration time. A changing database needs a different schedule from static media.
Distinguish backup types
A snapshot captures server state. Application backups preserve files and configuration. Database-aware backups protect consistency. Off-server copies protect against loss of the primary host or account.
Use multiple layers
- Application and database backups
- Encrypted off-server copy
- Documented credentials and DNS
- Retention appropriate to the workload
- Periodic restore testing
Protect backups
Use separate credentials, encryption and restricted access. A backup mounted with compromised production credentials can be deleted by the same incident.
Define retention
Keep enough versions to detect delayed corruption or malicious changes. Daily, weekly and monthly retention depends on volume, obligations and recovery objectives.
Test restoration
A successful job is not proof of recoverability. Restore into an isolated location, validate files and databases, and document the time and steps.
Know the service boundary
Confirm whether an add-on covers snapshots, application data, databases, retention or assisted restoration. Maintain an independent copy.