Backup
A backup is a copy of your data stored separately from the original so it can be restored if the original is lost, corrupted, or destroyed. Effective backup strategies follow the 3-2-1 rule: maintain at least 3 copies of your data, on 2 different types of media, with 1 copy stored offsite or in the cloud.
For defense contractors handling CUI, backups must be protected with the same security controls as the original data — encryption, access controls, and secure storage. Backups are your last line of defense against ransomware and data destruction attacks.
Why It Matters
CMMC requires regular system backups. But a backup is only useful if it works — regular backup testing and verified restores are essential. An untested backup is a backup you can't trust when you need it most.