Data Backup and Disaster Recovery for UAE Businesses: What Actually Protects You
Most companies discover their backup does not work on the day they need it. This is a practical guide to the 3-2-1 rule, air-gapped archiving, encrypted portable storage and recovery testing, from the division PRO TECHnology has run since 1998.
- The rule
- 3-2-1: three copies, two media types, one kept off-site or offline
- Why air gap matters
- Ransomware encrypts what it can reach, including connected backups
- Long term archive
- Disk Archive ALTO disk-based cold storage as an alternative to tape
- Portable data
- Kanguru hardware encrypted USB and SSD, AES 256-bit, FIPS certified models
- Remote control
- KRMC can disable a lost or stolen drive anywhere in the world
- Creative and media
- LaCie storage for video editing, post-production and photography
- Device layer
- FileWave manages and re-images endpoints across macOS, Windows and mobile
- The test
- A backup you have never restored from is a hypothesis, not a backup
- Retention
- Match retention to your regulatory obligation, not to disk cost
- Division
- PRO TECHnology Enterprise IT, Dubai, since 1998
- Coverage
- UAE, Saudi Arabia and the wider GCC
- Contact
- +971 4 343 5501, sales@protech.ae
The 3-2-1 rule, and where UAE businesses break it
Three copies of the data, on two different media, with one off-site or offline. Most companies manage the three copies and fail the last part, which is the only part ransomware cares about.
Three copies
Production, plus two independent backups. A RAID array is redundancy, not a backup.
Two media types
Disk and archive, or disk and removable, so a single technology failure cannot take everything.
One offline or off-site
This is the copy that survives ransomware, because malware cannot encrypt what it cannot reach.
Cloud is not automatically off-site
A cloud drive that is mounted and writable from an infected machine is just another connected copy.
Ransomware changed what a backup has to survive
Modern ransomware looks for backups first. It is not enough for a copy to exist; it has to be unreachable from the compromised network at the moment of the attack.
Air gapped archive
Disk Archive ALTO keeps long-term data on disk that is powered down and disconnected until needed.
Immutable retention
Set retention so a copy cannot be altered or deleted inside its window, even by an administrator account.
Encrypted portable copies
Kanguru hardware encrypted drives keep the keys on the device, so a lost drive is not a breach.
Kill a lost drive remotely
The Kanguru Remote Management Console can disable a lost or stolen drive from anywhere in the world.
Match the storage to the job
Backup, archive and working storage are three different problems. Using one product for all three is how companies end up paying premium prices to store data nobody will ever open again.
Working storage
LaCie for editing, photography and post-production, where read speed is the constraint.
Backup
Fast to write, fast to restore, retained for weeks or months. This is your operational safety net.
Archive
Cold, cheap per terabyte, retained for years. Disk Archive replaces tape without tape's restore pain.
Endpoints
FileWave re-images and restores devices, so a lost laptop is an inconvenience rather than an incident.
Test the restore, not the backup
The backup job reporting success tells you a file was written. It tells you nothing about whether you can get your business back. The only meaningful test is a restore, done on a schedule.
Restore drill quarterly
Pick a real system, restore it to isolated hardware and time it. That number is your actual recovery time.
Know your RTO and RPO
How long can you be down, and how much data can you afford to lose? Everything else follows from those two answers.
Document who does what
At 3am the person who built the backup may be unreachable. The runbook matters more than the technology.
Review it after you grow
A backup designed for 5TB and twenty staff quietly stops being adequate. Revisit it annually.
Frequently asked questions
What is the 3-2-1 backup rule?
Keep three copies of your data, on two different types of media, with at least one copy off-site or offline. The offline copy is what protects you against ransomware, because malware can only encrypt storage it can reach from the infected network.
Does RAID count as a backup?
No. RAID protects against a disk failing, not against deletion, corruption, ransomware or a site incident. If a file is encrypted or deleted, RAID faithfully replicates that across every disk in the array. You still need independent backups.
What is air-gapped backup and why does it matter for ransomware?
An air-gapped copy is physically disconnected or powered down when not in use, so it cannot be reached from a compromised network. Disk Archive ALTO systems keep long-term data on disk that is offline until it is needed, which is what makes them a practical ransomware defence as well as an archive.
Is cloud storage enough on its own?
Only if at least one copy is genuinely unreachable from your production environment. A cloud drive that is mounted and writable from an infected workstation will be encrypted along with everything else. Cloud plus an offline archive is the combination that holds up.
How should we move data securely between sites in the UAE?
Use hardware encrypted portable storage rather than consumer USB sticks. Kanguru Defender drives keep the encryption engine and keys on the device with AES 256-bit encryption, and the Kanguru Remote Management Console lets administrators disable a lost or stolen drive from anywhere in the world.
How often should we test a restore?
At least quarterly, and always after a significant infrastructure change. Restore a real system to isolated hardware and time it. That measured figure is your true recovery time, and it is usually longer than people expect.
What is the difference between backup and archive?
Backup is a short-term operational copy for recovering recent work, optimised for speed of restore. Archive is long-term retention of data you must keep but rarely open, optimised for cost per terabyte and durability. Using backup storage for archive is expensive, and using archive for backup is slow.
النسخ الاحتياطي واستعادة البيانات بعد الكوارث للشركات في الإمارات
حماية بيانات الشركات تبدأ بقاعدة 3-2-1: ثلاث نسخ من البيانات، على نوعين مختلفين من وسائط التخزين، ونسخة واحدة على الأقل خارج الموقع أو غير متصلة بالشبكة. النسخة غير المتصلة هي التي تنجو من هجمات الفدية، لأن البرمجيات الخبيثة لا تستطيع تشفير ما لا تصل إليه. نظام RAID ليس نسخة احتياطية، فهو يحمي من تعطل قرص واحد فقط. توفر بروتكنولوجي حلول الأرشفة طويلة المدى عبر أنظمة Disk Archive ALTO للتخزين البارد على الأقراص كبديل عن الشرائط، وأقراص Kanguru المشفّرة بالعتاد بتشفير AES 256 بت مع إمكانية تعطيل أي قرص مفقود أو مسروق عن بُعد، ووحدات تخزين LaCie للمونتاج والإنتاج الإعلامي، وإدارة الأجهزة عبر FileWave. كلمات البحث الشائعة: النسخ الاحتياطي للشركات، استعادة البيانات بعد الكوارث، الحماية من فيروسات الفدية، أرشفة البيانات طويلة المدى، تخزين آمن للبيانات، خطة استمرارية الأعمال، نسخ احتياطي خارج الموقع. اختبروا الاستعادة فعليًا كل ربع سنة، فالنسخة التي لم تُستعد منها بياناتك من قبل ليست نسخة احتياطية بل افتراض. قسم تقنية المعلومات للمؤسسات في بروتكنولوجي يخدم الإمارات والسعودية ودول الخليج منذ عام 1998.
Find out whether your backup would survive a bad Tuesday
We will review your current backup and retention against your recovery objectives and your regulatory obligations, and tell you plainly where the gaps are.