Onsite vs offsite backup
An onsite backup sits in the same building as the systems it protects. It is fast to restore from, but fire, flood, theft, power problems or ransomware that spreads across your network can affect both production and backup at the same time.
An offsite backup is stored in a different location. It takes longer to copy data out the first time, but it is the copy that survives when the primary site cannot. Most businesses keep a local copy for quick restores and an offsite copy for protection, which is exactly what the 3-2-1 rule recommends.
Full, incremental and differential backups
Backup software usually combines three backup types. The right mix balances backup time, storage use and how quickly you can restore.
| Full | Incremental | Differential |
| What is copied | Everything | Changes since the last backup | Changes since the last full backup |
| Backup time | Longest | Shortest | Grows over time |
| Storage used | Highest | Lowest | Medium |
| Restore needs | One backup | Full plus each incremental | Full plus latest differential |
How to choose a retention period
Retention should match how long it takes to notice a problem. Accidental deletions are usually spotted within days, but data corruption or a quiet ransomware infection can go unnoticed for weeks. If your retention is shorter than that, every restore point may already be affected.
Longer retention needs more storage, so set it per workload. Critical databases and financial records often justify 90 days or more, while short-lived or easily rebuilt data may need far less. Also check any record-keeping obligations that apply to your industry.
What is immutable backup, and why it matters for ransomware
An immutable backup cannot be changed or deleted until its retention period ends, even by an administrator account. Modern ransomware often targets backups first, so an attacker with admin access can wipe ordinary backup copies before encrypting production.
Immutability removes that option. Combined with offsite storage and encryption, it gives you a clean restore point when everything else has been compromised.
Why you should test restores
A backup job that reports success is not the same as a backup you can restore. Credentials expire, software changes and jobs silently skip files. Restoring sample files, databases or full machines on a regular schedule is the only way to know your backups work, and how long a real restore will take.
Offsite backup storage in Kolkata
If your production systems run in your office, in a public cloud or in another Indian city, HostGraber DC-01 in New Town, Kolkata gives your backups a separate, professionally managed home, with your team able to reach the hardware when needed.
Backup storage at HostGraber can be combined with disaster recovery, cross connects and private networking, so backup traffic and recovery are planned together.