06 June 2025

Iwona Zalewska, Regional Director for UK & Ireland, DRAM Business Manager, EMEA Region, Kingston Technology Europe

In today’s digital-first enterprise environment, organisations operate across multiple locations, platforms, and networks. With employees connecting remotely, collaborating from branch offices, or accessing systems via mobile endpoints, enterprise networks have become both expansive and vulnerable. Which is why, with cyber threats escalating, backup strategies are no longer optional - they are fundamental to continuity.

Enterprise data loss: a business-level threat

Corporate networks have enormous volumes of often sensitive and mission-critical information. Yet, data loss can still result from something as mundane as human error, as menacing as a ransomware attack, or as unpredictable as a power surge or flood.

Despite this mounting risk, backup negligence and secure data storage remains a blind spot for many enterprises, with the cost of data breaches spanning operational downtime, reputational damage, regulatory fines, and in worst-case scenarios, permanent business closure. A study by Censuswide for Beaming, found that up to a quarter of businesses do not back up their company data at all, while 12% maintain a single copy of data, stored either on individual computers, or on a single server. In this context, a robust, strategic backup approach using storage technology that is fit-for-purpose isn’t just IT hygiene — it’s a core part of enterprise risk management.

Why backup strategies fail in enterprise networks

Enterprises often underestimate or under-resource their backup planning for several reasons:

• Complexity of infrastructure: As companies expand, they accumulate multiple systems, data centres, and cloud environments. Without centralised visibility, ensuring consistent backup across all endpoints and networks becomes a logistical headache.
• Budget misalignment: Data protection budgets are often seen as cost centres, not as investments. Some IT departments are left to ‘make do,’ leading to patchwork solutions and underfunded data storage.
• Overconfidence in redundancy: Many firms believe that high availability systems and RAID arrays offer sufficient protection. While redundancy limits system downtime, it doesn’t protect against threats like ransomware or insider sabotage that can encrypt or destroy all connected systems simultaneously.
• Outdated technology: Legacy backup hardware or outdated software may not integrate well with cloud-native platforms or newer business applications, leaving entire datasets exposed.
• Lack of defined ownership: In some networks, no one department takes full accountability for backup strategy, leading to inconsistencies, missed schedules, and insufficient coverage.

A simple, powerful strategy - the 3-2-1 backup rule

The 3-2-1 approach is simple and reliable. It’s a scalable, adaptable framework that ensures enterprises can withstand failures, disasters, and attacks across large, networked environments.

Here’s how it works:

• 3 copies of data: Maintain three separate copies — your primary data and two backups. This redundancy ensures that if one copy is lost or corrupted, you still have two fallback options.
• 2 different storage media: Store backups on two different types of media (e.g., a local server and an external encrypted SSD). This prevents a single type of hardware failure or malware strain from compromising all data copies.
• 1 off-site copy: Keep at least one backup copy off-site, ideally air-gapped from your network. This is crucial for recovery after physical disasters or ransomware attacks that target network-connected devices.

This model is straightforward to implement but extremely powerful in safeguarding enterprise operations.

“Enterprises should deploy automated backup software configured to specific operational schedules and compliance requirements. Additionally, regular testing of backups — both file integrity and restore speed — is critical.”

Taking the next steps

Enterprise ransomware incidents are particularly devastating because attackers often target not only operational data but also connected backups. Without an off-site, offline copy, companies may be forced to pay ransoms or risk losing sensitive information permanently.

By air-gapping one backup copy — typically stored on an external encrypted SSD — organisations create a safety net that is out of reach of attackers. Should a ransomware event occur, IT teams can isolate and restore clean data from the drive, resuming operations with minimal disruption.
Businesses should also conduct a thorough inventory of their data assets and prioritise backups for:

• Sensitive or proprietary data: Intellectual property, customer records, and strategic plans.
• Essential operational data: Files necessary for day-to-day business continuity.
• Regulated or legal records: Data subject to GDPR, HIPAA, or other compliance mandates.

Segmenting backups by sensitivity and importance enables targeted protection and more efficient recovery.

Automation and testing

Automation is key in large-scale environments. Manual backups are more likely to be affected by human error and inconsistency. Enterprises should deploy automated backup software configured to specific operational schedules and compliance requirements. Additionally, regular testing of backups — both file integrity and restore speed — is critical. A backup that can’t be restored is as bad as no backup at all.

More than a technical afterthought

For enterprises managing hybrid cloud environments, international offices, and distributed teams, a resilient backup strategy is not a technical detail — it’s a way of mitigating risk. The ROI is undeniable: avoiding downtime, slashing ransomware fallout, and maintaining compliance all deliver tangible cost savings.

Backup should be a daily discipline for every enterprise, but it starts with investing in the right storage medium to keep data secure. Research the benefits of external encrypted SSDs to determine the model best suited to the company and implement the 3-2-1 back up method as an operational imperative.

The question is no longer whether your enterprise can afford to back up its data. It’s whether you can afford not to.