Skip to main content

Cybersecurity · Managed Backup

Immutable Backups: Protect Your Data with the 3-2-1-1-0 Rule

A robust backup strategy is the last line of defence against a cyberattack. We apply the 3-2-1-1-0 rule: three copies, on two different media, with one offsite, one of which is immutable or offline, and zero verification errors.

  • Anti-Ransomware Protection
  • 3-2-1-1-0 Backup Strategy
  • 'Zero Error' Verification
  • Immutable & Offline Copy

What are immutable backups and the 3-2-1-1-0 rule?

An immutable backup is one that, once created, cannot be modified or deleted for a predefined retention period. This feature is crucial for protecting data against ransomware, as cybercriminals will be unable to encrypt or erase your backup copies, ensuring you always have a clean version of your data to recover your business.

The 3-2-1-1-0 rule is the gold standard for comprehensive data protection. It involves keeping 3 copies of your data (the original and two backups) on 2 different media types to prevent simultaneous failures. One of these copies must be located offsite. The new addition is the '1-0': one copy must be immutable or offline (air-gapped), and the system must guarantee 0 errors in integrity checks and restorability tests.

Who it's for

For businesses that cannot afford to lose their data

This service is essential for any organisation that considers its data a critical asset. If data loss from a cyberattack, human error, or hardware failure would halt your operations, you need a backup strategy that goes beyond a simple daily backup.

We cater to businesses seeking a genuine guarantee of recoverability, active protection against ransomware, and compliance with data protection regulations that demand robust contingency plans.

Our Value

A single point of contact for your infrastructure and its protection

At Seintec, we don't separate infrastructure from its protection. As the managers of your systems, whether in our own data centre in Sant Miquel de Balenyà (Osona) or in the cloud, we have an in-depth understanding of your environment. This allows us to design and implement the most effective backup strategy.

Our in-house technical team, with over 15 years of experience, handles the entire process without intermediaries. You have a single point of contact and clear accountability, avoiding the typical finger-pointing between hardware, software, and service providers in the event of an incident.

The Service

From auditing to managing a complete backup strategy

Our managed backup service goes beyond simply running tasks. We offer a comprehensive solution:

  • Initial audit of your existing infrastructure and backup policy.
  • Design of a tailored 3-2-1-1-0 strategy, defining media, offsite storage, immutability technology, and retention periods.
  • Implementation of the backup solution by our technical team.
  • Daily management of backup jobs, including monitoring for successful completion.
  • Verification of the integrity and consistency of backed-up data.
  • Planning and execution of periodic, controlled restoration tests.
  • Advice and support during data recovery processes.

Shared Responsibility Model

Clarity from day one for effective protection

Data protection is a team effort. We clearly define responsibilities to ensure the strategy works.

Seintec's Responsibilities

  • Design, implement, and maintain the backup platform.
  • Manage and monitor the execution of backups according to the agreed policy.
  • Ensure the immutability and security of the backup storage.
  • Perform the agreed-upon verification and restoration tests.
  • Alert you to any anomalies or failures in the process.
  • Assist with restore operations as per the service agreement.

Client's Responsibilities

  • Define the recovery objectives (RPO and RTO) for each data type.
  • Identify and classify the critical data that needs to be protected.
  • Notify Seintec of any significant changes to infrastructure or applications.
  • Validate the results of restoration tests.
  • Authorise recovery processes in the event of an incident.
  • Ensure users adhere to the company's security policies.

Scope of Service

What's not included in our managed backup service

Our service focuses on the management, monitoring, and verification of your backup strategy. Our proposal always details the exact scope, but as a general rule, the service does not include:

The cost of backup hardware or software licences, unless procured as part of a bundled service.

The cost of cloud storage or storage in our data centre, which is billed based on consumption.

The execution of a full disaster recovery plan, which is a separate 'Disaster Recovery' service.

The recovery of files accidentally deleted by a user if the request is made outside the defined retention windows.

Our Implementation Process

  1. 01

    1. Analysis & Audit

    We start with a free ICT review or an in-depth audit (which is chargeable but deductible from the project cost) to assess your infrastructure, current backup policies, and business needs (RPO/RTO).

  2. 02

    2. 3-2-1-1-0 Strategy Design

    We present you with a bespoke technical and operational solution that meets the 3-2-1-1-0 rule, defining media, offsite location, immutability technology, and a verification plan.

  3. 03

    3. Implementation & Configuration

    Our technical team deploys the hardware and software solution, configures the backup jobs, and sets up monitoring and alert systems.

  4. 04

    4. Ongoing Management & Testing

    We handle daily operations, verify backup integrity, and perform regular, documented restoration tests to ensure we meet the 'zero error' target.

A Snapshot is Not a Backup: Key Differences

Although useful for quick recoveries, snapshots do not replace a robust backup. They are dependent on the original system and do not protect against storage failures or attacks that corrupt the primary volume.

A Snapshot is Not a Backup: Key Differences
FeatureSnapshotBackup
PurposeVery short-term operational recovery (minutes/hours).Disaster recovery, long-term retention, and data protection.
DependencyDependent on the source storage system. If the original is corrupted, the snapshot may be useless.An independent, self-contained file stored on a separate system.
RetentionShort-term. Accumulating many snapshots degrades the performance of the source system.Long-term and flexible. Allows data to be archived for months or years without impacting production.
Ransomware ProtectionLow. If ransomware encrypts the storage volume, it can also affect the snapshots.High. Being separate, and potentially immutable and offline, it is the primary defence.

Frequently Asked Questions about Immutable Backups

What exactly does it mean for a backup to be 'immutable'?

It means that once the backup data has been written, it cannot be altered or deleted until its retention policy expires. Neither a privileged administrator nor an attacker can modify it, which protects its integrity from malicious encryption or accidental deletion.

Does a cloud backup count as 'offsite' and 'immutable'?

Yes. A backup hosted in a cloud region that is geographically separate from your production environment is considered 'offsite'. Furthermore, major cloud providers offer storage with immutability policies (Object Lock) that we can manage to meet this requirement of the 3-2-1-1-0 rule.

How is 'zero error' verification guaranteed?

It's not enough to just confirm that a backup job has completed. Our service includes periodic tests to restore files, databases, or entire virtual machines in an isolated environment to verify that the data is consistent and recoverable. This process is automated and documented.

What's the difference between this service and 'Disaster Recovery'?

This service ensures your backups are valid and recoverable. A 'Disaster Recovery' (DR) service goes a step further: it plans and automates the process of bringing up your entire ICT infrastructure at a secondary location using those backups, minimising downtime to minutes.

We have a lot of data and an old backup system. How do we start?

The first step is our free ICT review. We analyse your data volume, criticality, and current systems to propose a phased strategy tailored to your budget and priorities. From there, we can conduct an in-depth audit if necessary.

What are RPO and RTO, and why are they important?

RPO (Recovery Point Objective) is the maximum amount of data a business can afford to lose, which defines the backup frequency (e.g., hourly, daily). RTO (Recovery Time Objective) is the maximum time a system can be down, which defines how quickly we must be able to restore it. These are key metrics you help us define to design your solution.

Next step

Would your backup strategy withstand a cyberattack?

Don't wait for an incident to find out. 90% of businesses that lose their data without a recovery plan fail within a year. Contact our team for an initial, free review of your backup system.