The expert named ways to protect data in case of technical failures

Having a backup copy does not guarantee data recovery after a failure. It may be useless if the basic storage conditions are not met. Mikhail Chusavitin, the head of the Netwell distributor's server department, told Izvestia about this on October 25.

"Backup protects data only if several conditions are met at once: a copy is actually created, stored separately from the original, inaccessible to anyone who can delete the original, and they have already tried to restore it. If at least one of them is not fulfilled, the copy will fail," he explained.

One of the basic approaches to data protection, according to Chusavitin, is the 3-2-1 rule: three copies, two different types of media, and one copy on a different site. For additional stability, the 3-2-1-1-0 rule is applied — with another copy disconnected from the network or protected from modification, and zero errors during recovery verification.

The expert added that it is equally important to separate access rights: credentials for working with the main infrastructure should not allow you to delete backups. For this purpose, separate accounts, the principle of minimum privileges, two-factor authentication and confirmation of critical operations are used.

To protect data now, companies and private users can start with the following steps: store at least one independent copy outside the main storage location, restrict access to backups to a separate account, and regularly check file and system recovery, Chusavitin listed.

The main misconception, according to the expert, is to assume that duplication automatically means security. Mirrored RAID arrays, cloud synchronization, and data storage in multiple regions of the same provider help with certain types of failures, but they do not always protect against deletion, encryption, or management errors.

Password threat: Hackers massively attack corporate emails

Criminals began to actively use personal dictionaries and the Fake Boss scheme.

On October 24, Sergey Shcherbakov, Technical director of Stakhanovets, an expert in the field of information security, said that it was technically impossible to completely delete personal data from the Internet, since information could be stored in search engines, web archives and backups of various services. However, users can reduce their digital footprint, for example, by deleting profiles in unused resources.