Where should website backups be stored, on the same server, elsewhere, or in the cloud
Backup 3-2-1 rule: 3 copies, 2 different media (disk + cloud), 1 offsite location. Keep a backup on the server + Google Drive/AWS S3 (cloud).
- Job title
- Front office accounting
- Sector
- Software
- Organization type
- 300-person organization
- Joined
- Aug 2025
- Message
- 34
My perspective changed after experiencing that. Don't hesitate to ask; those who don't ask always pay more.
Of course, it varies if your situation is different.
- Job title
- Accounting clerk
- Sector
- Education
- Organization type
- boutique agency
- Joined
- Sep 2023
- Message
- 78
Following. Payment information changes are never verified through the channel they came from.
I'm also curious if anyone does it differently.
- Job title
- Software developer
- Sector
- Law
- Organization type
- 40-person manufacturing company
- Joined
- Mar 2024
- Message
- 27
Weve heard this a lot, but it never happened like that for us. btw payment information changes are never verified through the channel they came from.
Everything goes well for the first three months; problems arise in the fourth... Of course it varies if your situation is different.
- Job title
- Data Analyst
- Sector
- Printing
- Organization type
- 120-person company
- Joined
- May 2025
- Message
- 235
- Job title
- Data entry clerk
- Sector
- Healthcare services
- Organization type
- family business
- Joined
- Dec 2025
- Message
- 3
There's a trap here, let me mention it. Just because everyone does it doesn't mean it's right.
This is my opinion, I'm not claiming it's absolute truth.
- Job title
- Store associate
- Sector
- Automotive aftermarket
- Organization type
- sole proprietorship
- Joined
- Nov 2024
- Message
- 227
I'm a small business let me explain from my side. If you don't write this down from the start, it leads to arguments later.
If I were you, I'd go this route.
- Job title
- Production planning
- Sector
- Livestock
- Organization type
- chain store
- Joined
- Feb 2024
- Message
- 24
Doki · Log management setup · 2024
My question might sound amateurish, sorry about that. Having backups accessible on the same network and with the same identity makes them part of the target.
I'm also curious if anyone does it differently.
Thanks, that was the answer I was looking for. If the notification path is long notifications don't arrive; missing notifications mean delayed incident detection.
An automated scan report is not the same as a penetration test. I'm also curious if anyone does it differently.
This is exactly what we experienced. Don't hesitate to ask; those who don't ask always pay more.
Of course, it varies if your situation is different.
- Job title
- Official account
- Sector
- Cybersecurity and digital
- Organization type
- Doki
- Joined
- Mar 2023
- Message
- 310
Thanks, that was the answer I was looking for. Everything goes well for the first three months; problems arise in the fourth.
- Job title
- Forum moderator
- Sector
- Cybersecurity and digital
- Organization type
- Doki
- Joined
- Jan 2023
- Message
- 2,840
I'm on watch duty and read the thread. Adding a point: most of the errors discussed here aren't technical but process-related. Every undocumented step eventually relies on someone's memory, and that memory fails.
There's also a measurement aspect to this. People defend habits not processes. Resistance comes from there.
This is my opinion, I'm not claiming it's absolute truth.
- Job title
- Accounting clerk
- Sector
- Paper
- Organization type
- medium-sized business
- Joined
- Sep 2024
- Message
- 4
There are three things to check when doing this. Solutions that work at a small scale collapse when you grow; I learned this late.
If I were you, I'd go this route.